Re: What's the deal with return-rst?

Joseph Spenner <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <19498_1224257435_48F8AF9B_19498_4736_1_669890.36106.qm@web30301.mail.mud.yahoo.com>
--- On Thu, 10/16/08, Joseph Tam <[email protected]> wrote:

> On Wed, 15 Oct 2008, Joseph Spenner wrote:
> 
> > Just taking a random stab at this, but do you happen
> to have any Dell servers on your network by chance?
> > 
> >
> http://opensolaris.org/jive/thread.jspa?messageID=208934
> 
> 
>  	- I don't see widespread network problems: it happens
> on
>  	a host by host basis.
> 
>  	- I also couldn't quite tell from that blog page
> whether only
>  	Solaris hosts with bge0 interfaces get affected, or not,
> but
>  	the firewall hosts I am talking about has a hme0
> interface.
> 
>  	- the "netstat -p" output didn't change
> during the transition
>  	from working to non-working,
> 
> One more data point:
> 
>  	- a different Solaris version running a self-compiled IPF
>  	version also exhibits this same problem:
> 
>  		uname -a: SunOS test2 5.9 Generic_122300-02 sun4u sparc
> SUNW,Ultra-1
>  		IPF -v: ipf: IP Filter: v4.1.28 (600)
> 
> At least with the last case, I can insert debugging code
> into IPF.
> Any more hints on how to debug this?

I personally experienced this problem on my network.  There was a Dell server causing Sun Solaris 10 systems to become inaccessible on the network due to the arp confusion.  I saw this on any Sun system with Solaris 10 patched with the latest/greatest patches around July/August.  It never showed up on any other Solaris version, so this may not be your issue.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.