Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What is the biggest attack in GBPS you stopped

    Scheduled Pinned Locked Moved General pfSense Questions
    737 Posts 33 Posters 598.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Supermule Banned
      last edited by

      Firewall stopped routing traffic. Link was fine.

      Lots of packetloss once again.

      1 Reply Last reply Reply Quote 0
      • H
        Harvy66
        last edited by

        So same issue as before, firewall is the weakest link, not the bandwidth? Maybe 2.3.

        Any news from the FreeBSD side of things?

        1 Reply Last reply Reply Quote 0
        • S
          Supermule Banned
          last edited by

          Not yet. They are digesting the attack that I did yesterday and curretnly looking at states not beeing freed as they should…. AFAIK.

          1 Reply Last reply Reply Quote 0
          • T
            torontob
            last edited by

            Did this end up in nowhere with the issue still being there?

            1 Reply Last reply Reply Quote 0
            • S
              Supermule Banned
              last edited by

              Still working on it.

              1 Reply Last reply Reply Quote 0
              • S
                Supermule Banned
                last edited by

                https://lists.freebsd.org/pipermail/freebsd-announce/2015-July/001655.html

                Latest update.

                1 Reply Last reply Reply Quote 0
                • P
                  peterclark4
                  last edited by

                  @Supermule:

                  https://lists.freebsd.org/pipermail/freebsd-announce/2015-July/001655.html

                  Latest update.

                  Does this need to be included in 2.2.4 before it is released?

                  1 Reply Last reply Reply Quote 0
                  • S
                    Supermule Banned
                    last edited by

                    That would be a very good idea if possible!

                    Opnsense has this fix done allready and a full release on friday.

                    1 Reply Last reply Reply Quote 0
                    • M
                      maverick_slo
                      last edited by

                      Do they have snapshot that you could test?

                      1 Reply Last reply Reply Quote 0
                      • S
                        Supermule Banned
                        last edited by

                        Waiting for the update to come. I will update and report back.

                        1 Reply Last reply Reply Quote 0
                        • H
                          Harvy66
                          last edited by

                          @peterclark4:

                          @Supermule:

                          https://lists.freebsd.org/pipermail/freebsd-announce/2015-July/001655.html

                          Latest update.

                          Does this need to be included in 2.2.4 before it is released?

                          You beat me to it. This thread is the first thing I thought about when I saw this in G+

                          https://www.freebsd.org/security/advisories/FreeBSD-SA-15:13.tcp.asc

                          1 Reply Last reply Reply Quote 0
                          • H
                            Harvy66
                            last edited by

                            Supermule, is this directly related to what you've been digging into?

                            1 Reply Last reply Reply Quote 0
                            • S
                              Supermule Banned
                              last edited by

                              Could very well be.

                              1 Reply Last reply Reply Quote 0
                              • T
                                tim.mcmanus
                                last edited by

                                So you haven't tested it?  It's more of a definite maybe that this resolves the issue?

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Supermule Banned
                                  last edited by

                                  Not yet.

                                  @tim.mcmanus:

                                  So you haven't tested it?  It's more of a definite maybe that this resolves the issue?

                                  1 Reply Last reply Reply Quote 0
                                  • F
                                    firewalluser
                                    last edited by

                                    @Supermule:

                                    https://lists.freebsd.org/pipermail/freebsd-announce/2015-July/001655.html

                                    Latest update.

                                    I suppose another question to ask, is how did we miss this on our own machines, and what can we do to avoid such problems from occurring again?

                                    Capitalism, currently The World's best Entertainment Control System and YOU cant buy it! But you can buy this, or some of this or some of these

                                    Asch Conformity, mainly the blind leading the blind.

                                    1 Reply Last reply Reply Quote 0
                                    • H
                                      Harvy66
                                      last edited by

                                      Supermule didn't miss it. Well, possibly. If it turns out to be the same issue.

                                      1 Reply Last reply Reply Quote 0
                                      • F
                                        firewalluser
                                        last edited by

                                        Spotted the behavior but nothing outputted from pfsense to observe though.

                                        Capitalism, currently The World's best Entertainment Control System and YOU cant buy it! But you can buy this, or some of this or some of these

                                        Asch Conformity, mainly the blind leading the blind.

                                        1 Reply Last reply Reply Quote 0
                                        • T
                                          tim.mcmanus
                                          last edited by

                                          @firewalluser:

                                          Spotted the behavior but nothing outputted from pfsense to observe though.

                                          Because it's not a pfSense issue.  This is an FreeBSD network driver issue.

                                          1 Reply Last reply Reply Quote 0
                                          • F
                                            firewalluser
                                            last edited by

                                            So there is nothing we can do then as this is just like a HW failure of sorts then?

                                            Capitalism, currently The World's best Entertainment Control System and YOU cant buy it! But you can buy this, or some of this or some of these

                                            Asch Conformity, mainly the blind leading the blind.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.