similar to: Thousands of TIME_WAIT connections with CUPS?

Hi there, I have some DDOS(?) attack on my router going where my apache HTTP server is flooded with short-timed connections from some host. This results in LOTS of sockets in TIME_WAIT/LAST_ACK/CLOSING states and eventually I'm out of mbufs, which, consequently means I can't even connect to the router from LAN. The kern.ipc.nmbclusters is 2560, (I guess high enough for router with

It has been some posting about this issue, but I cant find a solution I can't log on to my ldap server port 389 with my browser. service seems to be running. I am not running selinux, port 389 are open on both client and server. Message from browser: Access to this port is disabled for security reasons. Added command (hint from earlier posting) and got this list # netstat -aptn | grep

This was due to a ProxyRequests On Let this be a lesson to all. [root at localhost log]# cat /proc/net/ip_conntrack | wc -l 11042 [root at localhost log]# cat /proc/sys/net/ipv4/ip_conntrack_max 28632 [root at localhost log]# cat /var/log/messages ... Sep 2 04:04:30 localhost kernel: printk: 213 messages suppressed. Sep 2 04:04:30 localhost kernel: ip_conntrack: table full, dropping

Hi Damien, On Feb 23 10:28, Corinna Vinschen wrote: > On Feb 22 07:59, Damien Miller wrote: > > On Sat, 21 Feb 2015, Corinna Vinschen wrote: > > > - The failing last loop in the "forwarding" script as reported back > > > during 6.7 testing is still failing for me more often than not. It's > > > always the same reason, the script tries to use

Hi, I have a proxy/firewall, I want to dnat requests for 193.205.140.106 on port 443 towards 10.2.15.23 and requests for 193.205.140.106 on ports 4330 and 3389 towards 10.2.15.25, these rules must apply from internet, loc and fw (some client use a proxy on fw to reach these servers) I have tried with the following rules: DNAT net dmz:10.2.15.23 tcp 443 -

Hi Tom Here is the output of shorewall status Thanks Lars [H[2JShorewall-2.0.13 Status at - Thu Dec 30 21:43:44 CET 2004 Counters reset Thu Dec 30 15:38:17 CET 2004 Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 38383 11M ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 DROP !icmp --

sorry, i''m confuse where to post my problem.. i was post to shorewall-users, but must read to support.html this''s my problem ----------- i have squid running on DMZ zone and my network using ProxyARP on eth1 and eth2 mylinuxbox slackware 9.2 my network can access to internet normal, but can''t redirect to squid server from firewall. sometimes my network can connect

Hi, I have been using R for a few months and I have this working code. Don't seen any problem but this takes a long time. So if I have about 30000 rows it takes a few minutes. If I have 100000 it does not seem to complete. Original Data: Proto Recv-Q Send-Q Local-Address Foreign-Address State tcp 0 0 172.20.100.2:60255

Hi, I am currently implementing X11 forwarding for our Java SSH2 library (http://www.ganymed.ethz.ch/ssh2), and encountered a problem with the automatic display number selection in the x11_create_display_inet() method in channel.c. With my testcode I am able to get the OpenSSH daemon in a state where a following client connection, e.g., an OpenSSH client, is sometimes not able to properly use

Currently I have shorewal 2.2 installed om my debian 2.6.8 kernel. The firewall machine can access the internet via a ethernet modem fine. The firewall can ping the local network. The local network can ping the firewall server, see the samba files. Howeven teh local network cannot access the internet through the firewall Any suggestions? Rob van Overbruggen Settings and stats: Server: Eth1 :

Hi, Thanks for the suggestions - the immediate problem is solved. I feel that a monstrous weight has been lifted. I tried the suggestions and the printer connection is back - wonderful!!!!! what a relief! I stopped the firewall and samba so it is one of them, or both which is causing the problem? I would vote for samba3 as the culprit because the printer loss occurred on both machines on a 2

I''m attempting to setup Squid as shown on: http://shorewall.sourceforge.net/Shorewall_Squid_Usage.html#DMZ The firewall is a Bering 1.0 firewall running Shorewall 1.3.11, Red Hat 7.2 on the server in the DMZ. I''m not seeing the requests come in to the server using tcpdump. The server is 192.168.2.1 connecting to eth2 on the firewall, the local traffic I''m trying to

Hi, I''m serving the puppetmaster application with its config.ru through unicorn - proxied by nginx. I''m using unix sockets, 4 workers, and 2048 backlog. The clients - after their typical "puppet run" - send back a report to the master in YAML. Some clients whose reports tend to be large (close to 2mb) get a 502 bad gateway error and error out. nginx log: 2010/10/22

Hi all, I''m new to shorewall and have been struggling with several problems for several days now. Most of them are solved, but one still persists. The firewall is running on my server under Debian Sarge (Kernel 2.6) I''ve got three network interfaces: ppp0 (DSL Internet) eth1 (lan) ath0 (wlan) eth1 and ath0 are bridged together to br0. The problem is, that Samba (also running

A couple more thoughts... On Jan 16, 2015, at 10:42 AM, Warren Young <wyml at etr-usa.com> wrote: > On Jan 15, 2015, at 11:40 AM, Glenn Eychaner <geychaner at mac.com> wrote: > >> When the DOS box exits, crashes, or is rebooted, it fails to shut down the >> socket properly. > > Yes, that?s what happens when you use an OS that doesn?t implement sockets in

Hi, I'm having a problem with one of the servers, an Sun E450 Solaris 2.6 box, that after some time it will no longer be able to send out LDAP requests to the LDAP server. The response to every ldap query is: ldap_bind: Can't contact LDAP server Checking the netstat output I see a lot (over 300) of TIME_WAIT state request to the ldap server: r0104su03.34321 mailhost.389

https://bugzilla.netfilter.org/show_bug.cgi?id=1021 Pablo Neira Ayuso <pablo at netfilter.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED CC| |pablo at netfilter.org --- Comment #1 from Pablo

https://bugzilla.netfilter.org/show_bug.cgi?id=1229 Bug ID: 1229 Summary: conntrackd man page "State <policy> {<states list>}" Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component:

Anyone have experience with these kernel parameters? I can't find a whole lot of info on them. I have a situation where I'm trying to stress test a server, dual proc quad core with a tomcat application that is really fast. We can get it to about 60% CPU usage, and processing about 1,350 requests a second but we can't get much past that. It seems we are maxing out the sockets on the

G'day. I'm using Slackware 7.1 and Samba 2.0.7 When using the tests from samba.org I get to test 3. In there if it fails to listen it says to make sure netbios-ssn is in listen. I scripted my session. Script started on Wed Feb 21 10:13:38 2001 root@Server2001:/home/ashley# smbclient -L Server2001 added interface ip=192.168.0.2 bcast=192.168.0.255 nmask=255.255.255.0 session request to