Re: [Pound Mailing List] FreeBSD and failed requests

     I actually ran into the state table limit when working on  
another issue, so that's been tweaked in my test environment  
already.  In the case of this error though I didn't realize it was  
the PF state table.

On May 8, 2006, at 10:44 AM, Eric McCarthy wrote:

> On Mon, May 08, 2006 at 06:31:09PM +0200, Robert Segall wrote:
> > On Fri, 2006-05-05 at 16:24 -0700, Scott Larson wrote:
> > > May  5 14:52:58 fencer pound: backend 10.10.10.36:80 connect:
> > > Operation not permitted
> >
> > That is strange. From the man 2 connect (see the section on errors):
> >
> >     EACCES, EPERM
> >         The user tried to connect to a broadcast address without   
> > having
> >         the  socket  broadcast  flag  enabled  or the connection  
> > request
> >         failed because of a local firewall rule.
> >
> > Any idea how this could happen?
>
> In the case of the pf firewall, it will happen when pf's state table
> reaches its max.
>
> -Eric
>
>
> --
> To unsubscribe send an email with subject 'unsubscribe' to  
> pound-Ws3YcLWMCpvhvxM+mQhndA@xxxxxxxxxxxxxxxx
> Please contact roseg-Ws3YcLWMCps@xxxxxxxxxxxxxxxx for questions.
> http://www.apsis.ch/pound/pound_list/archive/ 
> 2006/2006-05/1146767005000/1147110290000

--
Scott Larson
Network Administrator
IOWA Interactive
4212 Glencoe Ave
Marina Del Rey, CA 90292

t 310.823.8238
f 310.823.7108
stl-vBUKIvN/9hiGO4FRh9xBPkEOCMrvLtNR@xxxxxxxxxxxxxxxx
http://www.iowainteractive.com
http://www.wiredrive.com



--
To unsubscribe send an email with subject 'unsubscribe' to 
pound-Ws3YcLWMCpvhvxM+mQhndA@xxxxxxxxxxxxxxxx
Please contact roseg-Ws3YcLWMCps@xxxxxxxxxxxxxxxx for questions.
http://www.apsis.ch/pound/pound_list/archive/2006/2006-05/1146767005000/1147111547000