RE: ipfilter box freezes after 2 days

> -----Original Message-----
> From: owner-ipfilter@coombs.anu.edu.au

> hmmm, are you using "return-*" with "out" rules or just "in" rules ?
>
> I'm trying to replicate this problem, but so far, there's no evidence
> of leaking packets with just these rules:
>
> # ipfstat -hio
> empty list for ipfilter(out)
> 2599757 block return-icmp in proto icmp from any to any
> 270980 block return-rst in proto tcp from any to any port 9000 >< 9999
>
> If you could monitor this problem by doing:
> vmstat -m
> netstat -m
> ipfstat
>

Hi

I did not see any mention about OS, but here is something what I have to
say. I am using Solaris 9 on sparc. When ipfilter 4.x was released I wanted
to compile it myself. I downloaded trial versions of Sun one studio. At that
time there was Early Access 1 version of it. Ipf and pfil did compile fine
and it did work fine for a several days. Sometimes computer just crashed.
Total lock out, no console, nothing. Only reboot did bring it back to life.
After first crash, crashes began to be more recent. Same crash scenarios
with every 4.x ipf version and EA2 and final Studio 9 compiler. Still 3.4.x
version worked fine with Studio 9 compiler.

For a few days back I did try Studio 8 and it did compile ipf 4.1.3 and pfil
2.1.4 fine and it even did make solaris package 100KB smaller. My point is
that somehow Studio 9 is not good to compile ipfilter. Use Studio 8. All
Studio version what I did use were trial versions. I haven’t seen any
discussion about this topic, but if this already has been discussed excuse
me.

Regards
-Esa