>[оверквотинг удален]
>>>поменял на
>>>6.2-RELEASE-p11:server/>sysctl kern.ipc.somaxconn
>>>kern.ipc.somaxconn: 32768
>>>
>>>Пока не вис компьютер, проверка дисков дала 0.
>>
>>Интересно, что компьютер не вис при расширении somaxconn. А что было в
>>top по памяти перед висюком?
>
>Память была как обычно... Хм...
Поставил перед сервером роутер, на котором поднял Вланы
# uname -a
FreeBSD 7.0-RC1
На каждый Влан назначил отдельно подсеть. Включил DHCP.
он уже 2-а раза зависал и без видимых причин. Зато сабж, обсуждаемый выше не зависает нынче.
Кто может подсказать чего сделать можно?
До этого этот роутер работал как прозрачный бридж с фильтрованием и ограничением полосы - он не зависал, зависал сервак.
PS:
Это всё началось после открытия портов: 123,135-139,901,445,7550,7551,7777,8167...
это с роутера:
# ipfw show
00001 57 4446 deny ip from 10.0.0.0/8 to 192.168.254.0/24 src-port 123,135-139,445,7551,7777,7550,8167
00002 57 2736 deny ip from 10.0.0.0/8 to 192.168.254.0/24 dst-port 123,135-139,445,7551,7777,7550,8167
00003 0 0 deny ip from any to 192.168.28.3 dst-port 123,135-139,445,7551,7777,7550,8167
00004 0 0 deny ip from any to 192.168.28.3 src-port 123,135-139,445,7551,7777,7550,8167
00008 80464 32290244 allow gre from any to any
00009 0 0 allow udp from any to any dst-port 500
00010 278 18592 allow tcp from any to any dst-port 1023,1723
00011 0 0 allow esp from any to any
00020 0 0 pipe 1 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via rl1
00022 0 0 pipe 1 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via rl1
00024 0 0 allow udp from 0.0.0.0 2054 to 0.0.0.0
00025 0 0 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00026 0 0 deny tcp from any to me in tcpflags syn,fin,!ack
00028 0 0 deny tcp from any to me in tcpflags fin,!ack,psh,urg
00029 47171 1933135 allow ip from any to me dst-port 22
00030 90011 20601371 allow ip from me 22 to any
00031 0 0 allow ip from any to any via lo0
00033 0 0 deny ip from any to any dst-port 67-68 via rl1
00034 0 0 deny tcp from any to any dst-port 67-68 via rl1
00035 0 0 deny udp from any to any dst-port 67-68 via rl1
00201 1078 89172 pipe 11 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via vlan1
00202 171 8208 pipe 11 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via vlan1
00203 252 39931 pipe 12 ip from { 192.168.25.1 or 192.168.26.1 or 192.168.24.1 or 192.168.27.1 or 192.168.28.1 } to any via vlan1
00204 186 11187 pipe 12 ip from any to { 192.168.25.1 or dst-ip 192.168.26.1 or dst-ip 192.168.24.1 or dst-ip 192.168.27.1 or dst-ip 192.168.28.1 } via vlan1
00205 0 0 pipe 13 ip from 192.168.0.0/16 to 192.168.0.0/16 via vlan1
00206 112 14201 pipe 14 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via vlan2
00207 0 0 pipe 14 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via vlan2
00208 49 8736 pipe 15 ip from { 192.168.25.1 or 192.168.26.1 or 192.168.24.1 or 192.168.27.1 or 192.168.28.1 } to any via vlan2
00209 37 2324 pipe 15 ip from any to { 192.168.25.1 or dst-ip 192.168.26.1 or dst-ip 192.168.24.1 or dst-ip 192.168.27.1 or dst-ip 192.168.28.1 } via vlan2
00210 0 0 pipe 16 ip from 192.168.0.0/16 to 192.168.0.0/16 via vlan2
00211 115 14490 pipe 17 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via vlan3
00212 6 288 pipe 17 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via vlan3
00213 207 30299 pipe 18 ip from { 192.168.25.1 or 192.168.26.1 or 192.168.24.1 or 192.168.27.1 or 192.168.28.1 } to any via vlan3
00214 167 9108 pipe 18 ip from any to { 192.168.25.1 or dst-ip 192.168.26.1 or dst-ip 192.168.24.1 or dst-ip 192.168.27.1 or dst-ip 192.168.28.1 } via vlan3
00215 0 0 pipe 19 ip from 192.168.0.0/16 to 192.168.0.0/16 via vlan3
00216 246 23787 pipe 20 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via vlan4
00217 0 0 pipe 20 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via vlan4
00218 61 9759 pipe 21 ip from { 192.168.25.1 or 192.168.26.1 or 192.168.24.1 or 192.168.27.1 or 192.168.28.1 } to any via vlan4
00219 38 2396 pipe 21 ip from any to { 192.168.25.1 or dst-ip 192.168.26.1 or dst-ip 192.168.24.1 or dst-ip 192.168.27.1 or dst-ip 192.168.28.1 } via vlan4
00220 0 0 pipe 22 ip from 192.168.0.0/16 to 192.168.0.0/16 via vlan4
00221 0 0 pipe 23 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via vlan5
00222 0 0 pipe 23 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via vlan5
00223 0 0 pipe 24 ip from { 192.168.25.1 or 192.168.26.1 or 192.168.24.1 or 192.168.27.1 or 192.168.28.1 } to any via vlan5
00224 0 0 pipe 24 ip from any to { 192.168.25.1 or dst-ip 192.168.26.1 or dst-ip 192.168.24.1 or dst-ip 192.168.27.1 or dst-ip 192.168.28.1 } via vlan5
00225 0 0 pipe 25 ip from 192.168.0.0/16 to 192.168.0.0/16 via vlan5
00226 0 0 pipe 26 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via vlan6
00227 0 0 pipe 26 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via vlan6
00228 0 0 pipe 27 ip from { 192.168.25.1 or 192.168.26.1 or 192.168.24.1 or 192.168.27.1 or 192.168.28.1 } to any via vlan6
00229 0 0 pipe 27 ip from any to { 192.168.25.1 or dst-ip 192.168.26.1 or dst-ip 192.168.24.1 or dst-ip 192.168.27.1 or dst-ip 192.168.28.1 } via vlan6
00230 0 0 pipe 28 ip from 192.168.0.0/16 to 192.168.0.0/16 via vlan6
00231 0 0 pipe 29 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via vlan7
00232 0 0 pipe 29 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via vlan7
00233 0 0 pipe 30 ip from { 192.168.25.1 or 192.168.26.1 or 192.168.24.1 or 192.168.27.1 or 192.168.28.1 } to any via vlan7
00234 0 0 pipe 30 ip from any to { 192.168.25.1 or dst-ip 192.168.26.1 or dst-ip 192.168.24.1 or dst-ip 192.168.27.1 or dst-ip 192.168.28.1 } via vlan7
00235 0 0 pipe 31 ip from 192.168.0.0/16 to 192.168.0.0/16 via vlan7
00236 0 0 pipe 32 ip from any to any src-port 123,135-139,901,445,7550,7551,7777,8167 via vlan8
00237 0 0 pipe 32 ip from any to any dst-port 123,135-139,901,445,7550,7551,7777,8167 via vlan8
00238 0 0 pipe 33 ip from { 192.168.25.1 or 192.168.26.1 or 192.168.24.1 or 192.168.27.1 or 192.168.28.1 } to any via vlan8
00239 0 0 pipe 33 ip from any to { 192.168.25.1 or dst-ip 192.168.26.1 or dst-ip 192.168.24.1 or dst-ip 192.168.27.1 or dst-ip 192.168.28.1 } via vlan8
00240 0 0 pipe 34 ip from 192.168.0.0/16 to 192.168.0.0/16 via vlan8
15000 52468 3736805 allow ip from any to 192.168.25.13
15000 52564 3736726 allow ip from 192.168.25.13 to any
50000 7687 809192 allow ip from any to any
65535 46 3747 deny ip from any to any