Thank you Vivek

>> connect both systems to a hub and run tcpdump on the other machine logging 
>> all traffic some place.

Yes they are already on a LAN with a switch.  I didn't realise TCPDump could be 
run from another machine other than the one being 
dumped from.  From what you suggest it can.  I'll study it up and see if I can 
get it to!  (Unless someone here knows the syntax for 
this well and can just roll it off?)

>>Buy hardware that's not faulty.  pfsense is *way* more robust than what it 
>>seems to be for you.  what network interfaces do you 
>>have?   if other than broadcom or intel, switch to intel.

We (3 of us) believe this is not a hardware issue.  3 of us are on the same ISP 
here in NZ, and experiencing the same issues for 
many months.  The ISP uses much the same Motorola Cable modem to interface into 
our static IP's.  The same fault occurs using 
completely different hardware here also.  I have another pfSense box running at 
alternative premises connected to quite a different 
ISP and that box just goes, in line with what we believe we should be 
expecting.  Swapping the boxes also suggests it is not a 
hardware problem as they all work at the alternative ISP / venue.

I find running Monowall also has the same experience here, - the same Monowall 
box is stable for months off site.  I have been 
tempted to post to the monowall list also, cross posts are considered bad 
etiquette and I presume the monowall folks are also on 
both lists, I have refrained.  (Is this correct?)

It suggests to me there is something about our ISP which is a problem, perhaps 
their hardware or perhaps something about their 
traffic.  Clearly this should not be the case, but the onus falls on us 
(rightly or wrongly) to prove this.

It also suggests to me there is a vulnerability in FreeBSD as the problem 
occurs in both Monowall and pfSense with this cable ISP.

I'd prefer my firewall not need random rebooting.  We'd all like to help within 
our power and ability to move this forwards as 
FreeBSD and its children (pfSense and Monowall) are largely fantastic!

Kind regards
David Hingston




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to