APF Disable Issue

After flushing APF, it seems to automagically re-initialize at one and the same time (say 04:02 server time) every day, no matter whether the program is active or disabled. This makes the server irresponsible and I have every morning to order a reboot, which is quite annoying a "casualty."

The tech persons claim that there is nothing in the cron jobs (daily or weekly) set at this time, so we all wander how is this possible to restart a disabled APF without having a cronjob set for that purpose.

And why the server goes dead, after performing all these things
Jul 13 04:02:03 lex apf(23789): flushing & zeroing chain policies
Jul 13 04:02:03 lex apf(23789): firewall offline
Jul 13 04:02:03 lex apf(23866): activating firewall
Jul 13 04:02:03 lex apf(23866): downloading http://feeds.dshield.org/block.txt
Jul 13 04:02:08 lex apf(23866): parsing block.txt into /etc/apf/ds_hosts.rules
Jul 13 04:02:08 lex apf(23923): determined eth0 has address
Jul 13 04:02:08 lex apf(23923): loading sysctl.rules
Jul 13 04:02:09 lex apf(23923): loading preroute.rules
Jul 13 04:02:09 lex apf(23923): loading prelog.rules
Jul 13 04:02:09 lex apf(23923): loading bt.rules
Jul 13 04:02:09 lex apf(23923): loading ds_hosts.rules
Jul 13 04:02:09 lex apf(23923): loading ad.rules
Jul 13 04:02:09 lex apf(23923): loading main.rules
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 21 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 22 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 25 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 53 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 80 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 110 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 137 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 138 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 139 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 143 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 443 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 445 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 2082 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 2083 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 2086 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 2087 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 2095 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 2096 on
Jul 13 04:02:09 lex apf(23923): opening inbound tcp port 30000:35000 on
Jul 13 04:02:09 lex apf(23923): opening inbound udp port 53 on
Jul 13 04:02:09 lex apf(23923): opening inbound icmp type 3 on
Jul 13 04:02:09 lex apf(23923): opening inbound icmp type 5 on
Jul 13 04:02:09 lex apf(23923): opening inbound icmp type 11 on
Jul 13 04:02:09 lex apf(23923): opening inbound icmp type 0 on
Jul 13 04:02:09 lex apf(23923): opening inbound icmp type 30 on
Jul 13 04:02:09 lex apf(23923): opening inbound icmp type 8 on
Jul 13 04:02:09 lex apf(23923): default (egress) output accept
Jul 13 04:02:09 lex apf(23923): default (ingress) input drop
Jul 13 04:02:10 lex apf(23866): firewall initalized
I will appreciate any suggestion as this APF issue makes me almost as much irresponsible as the server! :-)))

 

 

 

 

Top