|
||||||||
Hi all, Now this is a bit odd. I'm running 1.2b7 on a 400 MHz PII generic_pc platform with 192MB ram and 3 realtek NICs. Almost everything is running smooth except that when I make a call using _one_ of my voip ATAs (a Linksys unit from Vonage) but not the other one (from Speakeasy), I very quickly and reliably trigger a kernel panic on the router. I am not able to trigger it with any other load I have found so far (heavy tcp up and down). The panic message is below (copied by hand, sigh). The config.xml file is attatched. I'll post more details as I try different things to narrow this down. Fatal trap 12 = page fault while in kernel mode Fault virtual address = 0xC Fault code = supervisor read, page not present Instruction pointer = 0x8:0xC06087BC Stack pointer = 0x10:0xCA391AE8 Frame pointer = 0x10:0xCA391AF4 Code segment = base 0x0, limit 0xFFFFF, type 0x1B, DPL 0, Pres 1, def32, gran 1 Processor eflags = interrupt enabled, resume, IOPL=0 Current process = 29 (swi1: net) Trap number = 12 Debugging hints/tips are well appreciated. I've looked into it enough to know that this is a fairly typical panic from a FreeBSD 5.3 kernel. Debugging options to turn on in the bootloader?? -- Will Dyson | ||||||||
<?xml version="1.0"?>
<m0n0wall>
<version>1.4</version>
<lastchange>1112055557</lastchange>
<system>
<hostname>flash</hostname>
<domain>xxxxx</domain>
<username>xxxxx</username>
<password>xxxxx</password>
<timezone>America/New_York</timezone>
<time-update-interval>300</time-update-interval>
<timeservers>pool.ntp.org</timeservers>
<webgui>
<protocol>https</protocol>
<port/>
<certificate/>
<private-key/>
<expanddiags/>
</webgui>
<dnsserver>216.254.95.2</dnsserver>
<dnsserver>216.231.41.2</dnsserver>
<harddiskstandby>30</harddiskstandby>
</system>
<interfaces>
<lan>
<if>rl0</if>
<ipaddr>192.168.1.1</ipaddr>
<subnet>24</subnet>
<media/>
<mediaopt/>
</lan>
<wan>
<if>rl2</if>
<mtu/>
<blockpriv/>
<media/>
<mediaopt/>
<spoofmac/>
<ipaddr>xxxxx</ipaddr>
<subnet>24</subnet>
<gateway>xxxxx</gateway>
</wan>
<opt1>
<if>rl1</if>
<descr>Tenants</descr>
<ipaddr>192.168.100.1</ipaddr>
<subnet>24</subnet>
<bridge/>
<enable/>
</opt1>
<opt2>
<descr>OVPN server</descr>
<if>tun0</if>
<ipaddr>192.168.69.1</ipaddr>
<subnet>24</subnet>
<enable/>
<ovpn>server</ovpn>
</opt2>
</interfaces>
<staticroutes/>
<pppoe/>
<pptp/>
<bigpond/>
<dyndns>
<type>dyndns</type>
<username>xxxxx</username>
<password>xxxxx</password>
<host>xxxxx</host>
<mx/>
<enable/>
</dyndns>
<dnsupdate>
<host/>
<ttl>60</ttl>
<keyname/>
<keytype>zone</keytype>
<keydata/>
</dnsupdate>
<dhcpd>
<lan>
<range>
<from>192.168.1.100</from>
<to>192.168.1.200</to>
</range>
<enable/>
<defaultleasetime/>
<maxleasetime/>
<staticmap>
<mac>00:07:95:34:CF:C1</mac>
<ipaddr>192.168.1.10</ipaddr>
<descr>SPARK</descr>
</staticmap>
<staticmap>
<mac>00:07:95:32:4a:8c</mac>
<ipaddr>192.168.1.11</ipaddr>
<descr>TORCH</descr>
</staticmap>
<staticmap>
<mac>00:0f:b5:08:95:50</mac>
<ipaddr>192.168.1.12</ipaddr>
<descr>PHOTON</descr>
</staticmap>
<staticmap>
<mac>00:08:74:3a:89:f9</mac>
<ipaddr>192.168.1.15</ipaddr>
<descr>KAIZEN</descr>
</staticmap>
<staticmap>
<mac>00:03:47:8f:b7:e4</mac>
<ipaddr>192.168.1.16</ipaddr>
<descr>Phosphor</descr>
</staticmap>
<staticmap>
<mac>00:05:02:53:97:cf</mac>
<ipaddr>192.168.1.201</ipaddr>
<descr>Nova (imac)</descr>
</staticmap>
<staticmap>
<mac>00:13:10:12:c2:1c</mac>
<ipaddr>192.168.1.251</ipaddr>
<descr>VONAGE Linksys Adaptor</descr>
</staticmap>
<staticmap>
<mac>00:11:80:29:e2:b2</mac>
<ipaddr>192.168.1.252</ipaddr>
<descr>Voip Adapter</descr>
</staticmap>
<staticmap>
<mac>00:06:25:FE:71:9F</mac>
<ipaddr>192.168.1.253</ipaddr>
<descr>Linksys</descr>
</staticmap>
<staticmap>
<mac>00:09:5b:28:50:39</mac>
<ipaddr>192.168.1.254</ipaddr>
<descr>Clients - Netgear Router</descr>
</staticmap>
<winsserver>192.168.1.3</winsserver>
</lan>
<opt1>
<range>
<from>192.168.100.50</from>
<to>192.168.100.150</to>
</range>
<defaultleasetime/>
<maxleasetime/>
<enable/>
</opt1>
</dhcpd>
<pptpd>
<mode>server</mode>
<redir/>
<localip>192.168.2.254</localip>
<remoteip>192.168.2.16</remoteip>
<radius>
<server/>
<secret/>
</radius>
<user>
<name>kaizen</name>
<ip/>
<password>xxxxx</password>
</user>
<user>
<name>kwab</name>
<ip/>
<password>xxxxx</password>
</user>
<req128/>
</pptpd>
<ovpn>
<server>
<tun_iface>tun0</tun_iface>
<psh_options>
<ping>60</ping>
<pingrst>300</pingrst>
<redir_loc/>
</psh_options>
<port>1194</port>
<proto>UDP</proto>
<maxcli>5</maxcli>
<crypto>BF-CBC</crypto>
<verb>1</verb>
<enable/>
<bind_iface>wan</bind_iface>
<ipblock>192.168.69.0</ipblock>
<prefix>24</prefix>
<ca_cert></ca_cert>
<srv_cert></srv_cert>
<srv_key></srv_key>
<dh_param></dh_param>
</server>
</ovpn>
<dnsmasq>
<regdhcp/>
<hosts>
<host>candle</host>
<domain>lucidts.com</domain>
<ip>192.168.1.3</ip>
<descr>Candle</descr>
</hosts>
<hosts>
<host>candle</host>
<domain>lucid.local</domain>
<ip>192.168.1.3</ip>
<descr/>
</hosts>
<hosts>
<host>star</host>
<domain>lucid-2.local</domain>
<ip>192.168.1.2</ip>
<descr>Star - Win SBS 2003 Comp</descr>
</hosts>
<hosts>
<host>star</host>
<domain>lucidts.com</domain>
<ip>192.168.1.2</ip>
<descr>STAR</descr>
</hosts>
<enable/>
</dnsmasq>
<snmpd>
<syslocation/>
<syscontact/>
<rocommunity>public</rocommunity>
</snmpd>
<diag>
<ipv6nat>
<ipaddr/>
</ipv6nat>
</diag>
<bridge/>
<syslog>
<reverse/>
<nentries>100</nentries>
<remoteserver/>
</syslog>
<nat>
<rule>
<external-address>xxxxx</external-address>
<protocol>tcp</protocol>
<external-port>22</external-port>
<target>192.168.1.3</target>
<local-port>22</local-port>
<interface>wan</interface>
<descr/>
</rule>
<rule>
<external-address>xxxxx</external-address>
<protocol>tcp</protocol>
<external-port>443</external-port>
<target>192.168.1.2</target>
<local-port>443</local-port>
<interface>wan</interface>
<descr/>
</rule>
<rule>
<external-address>xxxxx</external-address>
<protocol>tcp</protocol>
<external-port>6000-6005</external-port>
<target>192.168.1.2</target>
<local-port>6000</local-port>
<interface>wan</interface>
<descr/>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>22</external-port>
<target>192.168.1.3</target>
<local-port>22</local-port>
<interface>wan</interface>
<descr>Candle - SSH</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>25</external-port>
<target>192.168.1.3</target>
<local-port>25</local-port>
<interface>wan</interface>
<descr>Candle - SMTP</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>80</external-port>
<target>192.168.1.2</target>
<local-port>80</local-port>
<interface>wan</interface>
<descr>Webserver on STAR</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>81</external-port>
<target>192.168.1.15</target>
<local-port>81</local-port>
<interface>wan</interface>
<descr>Keith</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>82</external-port>
<target>192.168.1.12</target>
<local-port>82</local-port>
<interface>wan</interface>
<descr>keith</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>443</external-port>
<target>192.168.1.2</target>
<local-port>443</local-port>
<interface>wan</interface>
<descr>Secure webserver on STAR</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>5001</external-port>
<target>192.168.1.3</target>
<local-port>5001</local-port>
<interface>wan</interface>
<descr>Candle Webserver</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>5500</external-port>
<target>192.168.1.193</target>
<local-port>5500</local-port>
<interface>wan</interface>
<descr/>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>5510</external-port>
<target>192.168.1.10</target>
<local-port>5510</local-port>
<interface>wan</interface>
<descr>VNC - SPARK</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>5511</external-port>
<target>192.168.1.11</target>
<local-port>5511</local-port>
<interface>wan</interface>
<descr>TORCH</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>5515</external-port>
<target>192.168.1.15</target>
<local-port>5515</local-port>
<interface>wan</interface>
<descr>KAIZEN - LVNC</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>5516</external-port>
<target>192.168.1.16</target>
<local-port>5516</local-port>
<interface>wan</interface>
<descr>Kwab - VNC</descr>
</rule>
<rule>
<protocol>tcp</protocol>
<external-port>6000-6005</external-port>
<target>192.168.1.2</target>
<local-port>6000</local-port>
<interface>wan</interface>
<descr>RPC on star</descr>
</rule>
<servernat>
<ipaddr>66.92.236.37</ipaddr>
<descr>candle.lucidts.com</descr>
</servernat>
<servernat>
<ipaddr>66.92.236.48</ipaddr>
<descr>star.lucidts.com</descr>
</servernat>
</nat>
<filter>
<rule>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.3</address>
<port>22</port>
</destination>
<descr>NAT Candle - SSH</descr>
</rule>
<rule>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.3</address>
<port>25</port>
</destination>
<descr>NAT Candle - SMTP</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.3</address>
<port>5001</port>
</destination>
<descr>NAT Candle Webserver</descr>
</rule>
<rule>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.2</address>
<port>443</port>
</destination>
<descr>NAT Secure webserver on STAR</descr>
</rule>
<rule>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.2</address>
<port>80</port>
</destination>
<descr>NAT Webserver on STAR</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.11</address>
<port>5511</port>
</destination>
<descr>NAT Torch - LVNC</descr>
</rule>
<rule>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.15</address>
<port>81</port>
</destination>
<descr>NAT Keith</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.16</address>
<port>5516</port>
</destination>
<descr>NAT Kwab - VNC</descr>
</rule>
<rule>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.11</address>
<port>5511</port>
</destination>
<descr>NAT TORCH</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.10</address>
<port>5510</port>
</destination>
<descr>NAT VNC - SPARK</descr>
</rule>
<rule>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.2</address>
<port>6000-6005</port>
</destination>
<descr>NAT RPC on star</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.15</address>
<port>5515</port>
</destination>
<descr/>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>udp</protocol>
<source>
<any/>
</source>
<destination>
<network>wanip</network>
<port>1194</port>
</destination>
<descr>Allow openvpn packets</descr>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.12</address>
<port>82</port>
</destination>
<descr/>
</rule>
<rule>
<type>pass</type>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<address>192.168.1.193</address>
<port>5500</port>
</destination>
<descr/>
</rule>
<rule>
<type>pass</type>
<interface>pptp</interface>
<source>
<network>pptp</network>
</source>
<destination>
<any/>
</destination>
<descr>PPTP</descr>
</rule>
<rule>
<type>pass</type>
<interface>opt2</interface>
<source>
<network>opt2</network>
</source>
<destination>
<any/>
</destination>
<descr>OVPN -> any</descr>
</rule>
<rule>
<type>pass</type>
<interface>opt1</interface>
<source>
<network>opt1</network>
</source>
<destination>
<network>lan</network>
<not/>
</destination>
<descr>Tenants -> net</descr>
</rule>
<rule>
<type>pass</type>
<interface>lan</interface>
<source>
<network>lan</network>
</source>
<destination>
<any/>
</destination>
<descr>Default LAN -> any</descr>
</rule>
<tcpidletimeout>18000</tcpidletimeout>
</filter>
<ipsec/>
<aliases>
<alias>
<name>VoipAdapter</name>
<address>192.168.1.252</address>
<descr>Speakeasy voip adapter</descr>
</alias>
<alias>
<name>VonageVoip</name>
<address>192.168.1.251</address>
<descr>Vonage VOIP adapter</descr>
</alias>
</aliases>
<proxyarp>
<proxyarpnet>
<interface>wan</interface>
<network>66.92.236.37/32</network>
<descr>candle.lucidts.com</descr>
</proxyarpnet>
<proxyarpnet>
<interface>wan</interface>
<network>66.92.236.48/32</network>
<descr>star.lucidts.com</descr>
</proxyarpnet>
<proxyarpnet>
<interface>wan</interface>
<network>66.92.236.97/32</network>
<descr>Tennant1</descr>
</proxyarpnet>
</proxyarp>
<wol/>
<shaper>
<pipe>
<bandwidth>691</bandwidth>
<descr>m_Total Upload</descr>
</pipe>
<pipe>
<descr>m_Total Download</descr>
<bandwidth>1459</bandwidth>
</pipe>
<queue>
<descr>m_High Priority #1 Upload</descr>
<targetpipe>0</targetpipe>
<weight>50</weight>
<mask>source</mask>
</queue>
<queue>
<descr>m_High Priority #2 Upload</descr>
<targetpipe>0</targetpipe>
<weight>30</weight>
<mask>source</mask>
</queue>
<queue>
<descr>m_High Priority #3 Upload</descr>
<targetpipe>0</targetpipe>
<weight>15</weight>
<mask>source</mask>
</queue>
<queue>
<descr>m_Bulk Upload</descr>
<targetpipe>0</targetpipe>
<weight>4</weight>
<mask>source</mask>
</queue>
<queue>
<descr>m_Hated Upload</descr>
<targetpipe>0</targetpipe>
<weight>1</weight>
<mask>source</mask>
</queue>
<queue>
<descr>m_Bulk Download</descr>
<targetpipe>1</targetpipe>
<weight>30</weight>
<mask>destination</mask>
</queue>
<queue>
<descr>m_Hated Download</descr>
<targetpipe>1</targetpipe>
<weight>10</weight>
<mask>destination</mask>
</queue>
<queue>
<descr>m_High Priority Download</descr>
<targetpipe>1</targetpipe>
<weight>60</weight>
<mask>destination</mask>
</queue>
<rule>
<descr>m_Small Pkt Upload</descr>
<targetqueue>0</targetqueue>
<interface>wan</interface>
<direction>out</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<iplen>0-100</iplen>
</rule>
<rule>
<descr>m_Outbound DNS Query</descr>
<targetqueue>0</targetqueue>
<interface>wan</interface>
<direction>out</direction>
<source>
<any/>
</source>
<destination>
<any/>
<port>53</port>
</destination>
<protocol>udp</protocol>
</rule>
<rule>
<descr>m_AH Upload</descr>
<targetqueue>0</targetqueue>
<interface>wan</interface>
<direction>out</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<protocol>ah</protocol>
</rule>
<rule>
<descr>m_ESP Upload</descr>
<targetqueue>0</targetqueue>
<interface>wan</interface>
<direction>out</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<protocol>esp</protocol>
</rule>
<rule>
<descr>m_GRE Upload</descr>
<targetqueue>0</targetqueue>
<interface>wan</interface>
<direction>out</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<protocol>gre</protocol>
<disabled/>
</rule>
<rule>
<interface>wan</interface>
<protocol>tcp</protocol>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<direction>out</direction>
<iplen>0-80</iplen>
<iptos/>
<tcpflags>ack</tcpflags>
<descr>m_TCP ACK Upload</descr>
<targetqueue>0</targetqueue>
</rule>
<rule>
<descr>m_ICMP Upload</descr>
<targetqueue>1</targetqueue>
<interface>wan</interface>
<direction>out</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<protocol>icmp</protocol>
</rule>
<rule>
<interface>wan</interface>
<protocol>udp</protocol>
<source>
<address>VoipAdapter</address>
</source>
<destination>
<any/>
</destination>
<direction>out</direction>
<iplen/>
<iptos/>
<tcpflags/>
<descr>VOIP traffic out</descr>
<targetqueue>1</targetqueue>
</rule>
<rule>
<interface>wan</interface>
<protocol>udp</protocol>
<source>
<address>VonageVoip</address>
</source>
<destination>
<any/>
</destination>
<direction>out</direction>
<iplen/>
<iptos/>
<tcpflags/>
<descr>VOIP traffic out</descr>
<targetqueue>1</targetqueue>
<disabled/>
</rule>
<rule>
<descr>m_Catch-All Upload</descr>
<targetqueue>3</targetqueue>
<interface>wan</interface>
<direction>out</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
</rule>
<rule>
<descr>m_ICMP Download</descr>
<targetqueue>7</targetqueue>
<interface>wan</interface>
<direction>in</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<protocol>icmp</protocol>
</rule>
<rule>
<descr>m_Small Pkt Download</descr>
<targetqueue>7</targetqueue>
<interface>wan</interface>
<direction>in</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<iplen>0-100</iplen>
</rule>
<rule>
<descr>m_AH Download</descr>
<targetqueue>7</targetqueue>
<interface>wan</interface>
<direction>in</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<protocol>ah</protocol>
</rule>
<rule>
<descr>m_ESP Download</descr>
<targetqueue>7</targetqueue>
<interface>wan</interface>
<direction>in</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<protocol>esp</protocol>
</rule>
<rule>
<descr>m_GRE Download</descr>
<targetqueue>7</targetqueue>
<interface>wan</interface>
<direction>in</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
<protocol>gre</protocol>
<disabled/>
</rule>
<rule>
<interface>wan</interface>
<protocol>udp</protocol>
<source>
<any/>
</source>
<destination>
<address>VoipAdapter</address>
</destination>
<direction>in</direction>
<iplen/>
<iptos/>
<tcpflags/>
<descr>Voip traffic in</descr>
<targetqueue>7</targetqueue>
</rule>
<rule>
<interface>wan</interface>
<protocol>udp</protocol>
<source>
<any/>
</source>
<destination>
<address>VonageVoip</address>
</destination>
<direction>in</direction>
<iplen/>
<iptos/>
<tcpflags/>
<descr>Voip traffic in</descr>
<targetqueue>7</targetqueue>
<disabled/>
</rule>
<rule>
<descr>m_Catch-All Download</descr>
<targetqueue>5</targetqueue>
<interface>wan</interface>
<direction>in</direction>
<source>
<any/>
</source>
<destination>
<any/>
</destination>
</rule>
<magic>
<maskq/>
<maxup>768</maxup>
<maxdown>1536</maxdown>
</magic>
<enable/>
</shaper>
</m0n0wall> |