Hi Guys, I''ve been facing a peculiar problem for the last few days.. I had setup shorewall 2.4 on a redhat 9 machine and it has been working fine for the last 3-4 months.. Last week the gateway starting freezing and i got the following error on the console : [<c0225e50>] ip_local_deliver_finish [Kernel] 0x0 [<>] ipt_ops [iptables_filter] [Kernel] 0x0 [<>] ip_rcv_finish [Kernel] 0x0 [<>] nf_hook [Kernel] 0x0 [<>] tun_get_usr [Kernel] 0x0 [<>] system_call [Kernel] 0x0 code : 0f 0b 00 c2 8f 29 c0 83 c4 14 c3 89 bc 27 00 00 00 <0> Kernel panic:Aiee,Killing interrupt handler ! In interrupt handler - not syncing This error stopped whenever we stopped / disabled shorewall. We have reinstalled the OS and also downloaded and installed Shorewall 3.2 on this machine , it worked fine for sometime after which it started freezing.. Again after i disabled shorewall, the machine works fine.. Any pointers on what the problem could be will be very helpful .... Thanks in Advance. Regards, Sushesh ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
On Tuesday 13 December 2005 04:05, Sushesh wrote:> Hi Guys, > I''ve been facing a peculiar problem for the last few days.. > I had setup shorewall 2.4 on a redhat 9 machine and it has been working > fine for the last 3-4 months.. Last week the gateway starting freezing and > i got the following error on the console : > > [<c0225e50>] ip_local_deliver_finish [Kernel] 0x0 > [<>] ipt_ops [iptables_filter] [Kernel] 0x0 > [<>] ip_rcv_finish [Kernel] 0x0 > [<>] nf_hook [Kernel] 0x0 > [<>] tun_get_usr [Kernel] 0x0 > [<>] system_call [Kernel] 0x0 > > code : 0f 0b 00 c2 8f 29 c0 83 c4 14 c3 89 bc 27 00 00 00 <0> Kernel > panic:Aiee,Killing interrupt handler ! In interrupt handler - not syncing > > This error stopped whenever we stopped / disabled shorewall. > > We have reinstalled the OS and also downloaded and installed Shorewall 3.2 > on this machine , it worked fine for sometime after which it started > freezing.. > Again after i disabled shorewall, the machine works fine.. > > Any pointers on what the problem could be will be very helpful ....Shorewall is simply a set of shell scripts for configuring Netfilter. It has no code that runs all of the time and contains no kernel code. I suggest that you post on the Netfilter Development mailing list -- possibly they can help you there. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
If you get different kinds of errors, I would guess it is a hardware problem. Otherwise, try using the newest kernel -- it''s quite likely that the problem has been fixed already. Rune On 12/13/05, Tom Eastep <teastep@shorewall.net> wrote:> On Tuesday 13 December 2005 04:05, Sushesh wrote: > > Hi Guys, > > I''ve been facing a peculiar problem for the last few days.. > > I had setup shorewall 2.4 on a redhat 9 machine and it has been working > > fine for the last 3-4 months.. Last week the gateway starting freezing and > > i got the following error on the console : > > > > [<c0225e50>] ip_local_deliver_finish [Kernel] 0x0 > > [<>] ipt_ops [iptables_filter] [Kernel] 0x0 > > [<>] ip_rcv_finish [Kernel] 0x0 > > [<>] nf_hook [Kernel] 0x0 > > [<>] tun_get_usr [Kernel] 0x0 > > [<>] system_call [Kernel] 0x0 > > > > code : 0f 0b 00 c2 8f 29 c0 83 c4 14 c3 89 bc 27 00 00 00 <0> Kernel > > panic:Aiee,Killing interrupt handler ! In interrupt handler - not syncing > > > > This error stopped whenever we stopped / disabled shorewall. > > > > We have reinstalled the OS and also downloaded and installed Shorewall 3.2 > > on this machine , it worked fine for sometime after which it started > > freezing.. > > Again after i disabled shorewall, the machine works fine.. > > > > Any pointers on what the problem could be will be very helpful .... > > Shorewall is simply a set of shell scripts for configuring Netfilter. It has > no code that runs all of the time and contains no kernel code. > > I suggest that you post on the Netfilter Development mailing list -- possibly > they can help you there. > > -Tom > -- > Tom Eastep \ Nothing is foolproof to a sufficiently talented fool > Shoreline, \ http://shorewall.net > Washington USA \ teastep@shorewall.net > PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key > > >------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
On Tuesday 13 December 2005 07:49, Rune Kock wrote:> If you get different kinds of errors, I would guess it is a hardware > problem. > > Otherwise, try using the newest kernel -- it''s quite likely that the > problem has been fixed already. >Good idea -- I missed the point that the OP was running an ancient distribution (RedHat 9). -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Sushesh wrote:> > Hi Guys, > I''ve been facing a peculiar problem for the last few days.. > I had setup shorewall 2.4 on a redhat 9You will be facing a lot of "peculiar" problems running such an older and unsupported distribution... I think it''s time to upgrade....
Hi Cristian, If you noted my mail.. I have mentioned that I have upgraded the shorewall to 3.2 and still I face the same problem.. Sushesh -----Original Message----- From: shorewall-users-admin@lists.sourceforge.net [mailto:shorewall-users-admin@lists.sourceforge.net] On Behalf Of Cristian Rodriguez Sent: Wednesday, December 14, 2005 4:00 AM To: shorewall-users@lists.sourceforge.net Subject: Re: [Shorewall-users] Kernel Panic Sushesh wrote:> > Hi Guys, > I''ve been facing a peculiar problem for the last few days.. > I had setup shorewall 2.4 on a redhat 9You will be facing a lot of "peculiar" problems running such an older and unsupported distribution... I think it''s time to upgrade.... ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
Sushesh wrote:> Hi Cristian, > If you noted my mail.. I have mentioned that I have upgraded the shorewall > to 3.2 and still I face the same problem.. >not a shorewall problem. Shorewall **DO NOT** generate kernel panic messages. it''s a problem of your older,unsupported and buggy distribution. get SUSE 10 or Fedora Core 4 and try again... ;-)
On Tuesday 13 December 2005 20:13, Sushesh wrote:> Hi Cristian, > If you noted my mail.. I have mentioned that I have upgraded the shorewall > to 3.2 and still I face the same problem.We have just explained to you that Shorewall is nothing more than some shell scripts and you are experiencing kernel panics. HINT: Shell scripts can''t cause kernel panics -- and if they do, it is the kernel''s problem, not the shell scripts''. Please understand: a) Shorewall is NOT the cause of your problem. Really -- it is NOT. b) Changing the version of Shorewall will not fix your problem. c) Installing another Netfilter configuration tool will not fix your problem. Cristian is referring to the other 1000+ packages that you are running (including the kernel) that are part of RedHat 9. Redhat 9 is not supported and hasn''t been for a long time. Redhat 9 was the predecessor of Fedora Core 1 - we are now at Fedora Core 4. Does that give you any clue as to how far behind you are? I don''t want to hear any more about this problem until you are running a current distribution. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Tom, I misunderstood Cristian mail .. My apologies for that.. Anyway thanks for the pointers.. Regards, Sushesh -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: Wednesday, December 14, 2005 10:01 AM To: shorewall-users@lists.sourceforge.net Cc: Sushesh Subject: Re: [Shorewall-users] Kernel Panic On Tuesday 13 December 2005 20:13, Sushesh wrote:> Hi Cristian, > If you noted my mail.. I have mentioned that I have upgraded the > shorewall to 3.2 and still I face the same problem.We have just explained to you that Shorewall is nothing more than some shell scripts and you are experiencing kernel panics. HINT: Shell scripts can''t cause kernel panics -- and if they do, it is the kernel''s problem, not the shell scripts''. Please understand: a) Shorewall is NOT the cause of your problem. Really -- it is NOT. b) Changing the version of Shorewall will not fix your problem. c) Installing another Netfilter configuration tool will not fix your problem. Cristian is referring to the other 1000+ packages that you are running (including the kernel) that are part of RedHat 9. Redhat 9 is not supported and hasn''t been for a long time. Redhat 9 was the predecessor of Fedora Core 1 - we are now at Fedora Core 4. Does that give you any clue as to how far behind you are? I don''t want to hear any more about this problem until you are running a current distribution. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click