This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

astaro v4.0 hangs inexplicably

Hi, all. I'm running astaro 4, recently upgraded from 3. I'm now having this problem: every so often, astaro would hang and no traffic can come in or out of the firewall. I can access the mgmnt i-face but I cannot ping inside-out or any of the firwall's interfaces. All ftp sessions running at the same hang as well (the problem seems to manifest itself most often when i ftp inside-out). I run a pretty standard setup, no PSD turned on or anything. I never had this problem before, when I used to run v3.

Any clues?

This thread was automatically locked due to age.

0 Vukasin over 22 years ago

Maybe there is something wrong with the hw?
Cancel
Vote Up 0 Vote Down

Cancel
0 coontie over 22 years ago in reply to Vukasin

i don't think so. Same hw ran 3.x no problem!
Cancel
Vote Up 0 Vote Down

Cancel
0 SecApp over 22 years ago in reply to coontie

Could be coincidental that you have recently been getting packet blasts, which are flooding the log.

IF you are Linux facile, see my post in Hackers:
"Re: 500 Internal Server Error "
Cancel
Vote Up 0 Vote Down

Cancel
0 Vukasin over 22 years ago in reply to SecApp

Maybe it was not bust before but is bust now. There is a point in the life of each hw component when a non-bust hardware becomes... busted [;)]
Cancel
Vote Up 0 Vote Down

Cancel
0 coontie over 22 years ago in reply to Vukasin

ok. Basically, you've no idea why it's doing that. Fine. As for un-busted that suddenly became busted -- I hereby invoke Occam and declare that idea silly.
Cancel
Vote Up 0 Vote Down

Cancel
0 coontie over 22 years ago in reply to SecApp

re: packet blasts. I think I AM getting that, because the stupid thing logs every single broadcast packet it sees, which is a TON, which quickly fills up the /var/log/kernel log. I've "solved" that problem by linking the kernel log file to /dev/null. I dont care about hackers because this astaro is behind corporate firewall, in lab.
Cancel
Vote Up 0 Vote Down

Cancel
0 cyclops over 22 years ago in reply to coontie

coontie,

Astaro isn't a stupid thing, you are either too lazy to configure it the right way or there is a big lack of knowledge. Second case could be improved by surfing the board and using the searchfunction. A search for e.g. 'dropping broadcasts' shows http://www.astaro.org/showflat.php?Cat=&Board=UBB10&Number=15788&Forum=All_Forums&Words=dropping%20broadcasts&Match=Entire%20Phrase&Searchpage=0&Limit=25&Old=allposts&Main=15787&Search=true#Post15788

Out of the box the firewall has to log the broadcast packets since they are directed to the firewall also and the default policy is LOGDROP.

Directing packet filter output to /dev/null is not really clever.

Greetings
cyclops
Cancel
Vote Up 0 Vote Down

Cancel
0 coontie over 22 years ago in reply to cyclops

Karramba! You mean you can search this board???! Betrayal! I looked at the link you supplied -- yea, good point (ok, so shoulda rtfmed) Did what the guy suggested, didn't do anything, btw, still packets logged. back to /dev/null.

Still doesn't address the original freeze problem. Hell with it, i downgraded to 3.x.
Cancel
Vote Up 0 Vote Down

Cancel
0 Kreuzritter over 22 years ago in reply to coontie

Is there any NIC with Realtek Chipset involved?
Cancel
Vote Up 0 Vote Down

Cancel
0 coontie over 22 years ago in reply to Kreuzritter

interesting question. I dont think so, they both show up as Intel CARDS, doesn't say what CHIPSET it is though. Could be realtek. Why? Have you seen problems with realtek?
Cancel
Vote Up 0 Vote Down

Cancel