Linux keeps freezing on UFW BLOCK


 
Thread Tools Search this Thread
Operating Systems Linux Linux keeps freezing on UFW BLOCK
# 1  
Old 03-25-2019
Linux keeps freezing on UFW BLOCK

Hi everyone,

I have had trouble getting several versions of Linux stable on my machine over the last few months.
I do not think the issue is with the machine. Windows ran fine on it for a long time.
The current issue is that whenever I lock the screen then come back after a long time I find it frozen.
Using ctrl-alt function keys does not work.
watchdog was running on my latest Linux install. It did catch a softlockup. It did catch something with the networking. Most likely watchdog was configured to halt the system. I then disabled watchdog by putting the following entry in sysctl.conf:
Code:
kernel.nmi_watchdog=0

After reboot, I did notice that there were watchdog processes still running:
Code:
root        13     2  0 19:56 ?        00:00:00 [watchdog/0]
root        16     2  0 19:56 ?        00:00:00 [watchdog/1]
root        22     2  0 19:56 ?        00:00:00 [watchdog/2]
root        28     2  0 19:56 ?        00:00:00 [watchdog/3]
root        34     2  0 19:56 ?        00:00:00 [watchdog/4]
root        40     2  0 19:56 ?        00:00:00 [watchdog/5]
root        46     2  0 19:56 ?        00:00:00 [watchdog/6]
root        52     2  0 19:56 ?        00:00:00 [watchdog/7]
root        58     2  0 19:56 ?        00:00:00 [watchdog/8]
root        64     2  0 19:56 ?        00:00:00 [watchdog/9]
root        70     2  0 19:56 ?        00:00:00 [watchdog/10]
root        76     2  0 19:56 ?        00:00:00 [watchdog/11]
root        82     2  0 19:56 ?        00:00:00 [watchdog/12]
root        88     2  0 19:56 ?        00:00:00 [watchdog/13]
root        94     2  0 19:56 ?        00:00:00 [watchdog/14]
root       100     2  0 19:56 ?        00:00:00 [watchdog/15]
root       127     2  0 19:56 ?        00:00:00 [watchdogd]
root     11202  3313  0 22:07 pts/0    00:00:00 grep --color=auto watchdog

Everything was running fine for a few days. Today the system froze. There are tons of lines in journalctl and the kern.log like this just before I forcibly rebooted.

Code:
Gaming-3 kernel: [10847.185615] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=01:00:5e:00:00:01:44:e9:dd:4d:5f:2c:08:00 SRC=192.168.2.1 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=2

I am on a home network but there are several WIFI networks running. My parents have a home office. The network guy setup a reasonably sophisticated setup. The 192.x IP is my machines gateway. I have no idea what 224.0..0.1 is. I assume something on the network is trying to reach a device through my wireless adapter. Maybe a ping?
I just have the default rules in ufw enabled: Deny ALL incoming Allow ALL outgoing.
If I turn UFW off, disable it, my system has not frozen yet.

Turning off logging does not work. I am not surprised. Logging would just eat up disk space not freeze the kernel.

I think the problem is that either watchdog was not disabled or UFW needs to be configured properly. I disabled UFW last night yet it still seems to be running this morning. The system locked up. The last lines in kern.log are a little different though. The source and destination IP's are different. How can I stop UFW from running?
Code:
Mar 25 21:19:58 -AB350-Gaming-3 kernel: [ 5011.827670] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=01:00:5e:00:00:fb:44:e9:dd:4d:5f:32:08:00 SRC=192.168.2.1 DST=224.0.0.251 LEN=28 TOS=0x00 PREC=0x00 TTL=1 ID=17
641 DF PROTO=2 
Mar 25 21:19:58 -AB350-Gaming-3 kernel: [ 5012.749595] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=01:00:5e:00:00:fb:54:99:63:c9:a5:01:08:00 SRC=192.168.2.166 DST=224.0.0.251 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=
54661 PROTO=2 
Mar 25 21:20:11 -AB350-Gaming-3 kernel: [ 5025.241280] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=01:00:5e:00:00:01:44:e9:dd:4d:5f:2c:08:00 SRC=192.168.2.1 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF
 PROTO=2 
Mar 25 21:20:50 -AB350-Gaming-3 kernel: [ 5064.255654] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=01:00:5e:00:00:01:44:e9:dd:4d:5f:2c:08:00 SRC=192.168.2.1 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF
 PROTO=2 
Mar 25 21:21:30 -AB350-Gaming-3 kernel: [ 5104.294042] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=01:00:5e:00:00:01:44:e9:dd:4d:5f:2c:08:00 SRC=192.168.2.1 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF
 PROTO=2 
Mar 25 21:21:59 -AB350-Gaming-3 kernel: [ 5133.733538] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=198.252.206.25 DST=192.168.2.196 LEN=113 TOS=0x08 PREC=0x00 TTL=5
2 ID=1095 DF PROTO=TCP SPT=443 DPT=37790 WINDOW=62 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:00 -AB350-Gaming-3 kernel: [ 5133.884016] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=198.252.206.25 DST=192.168.2.196 LEN=113 TOS=0x08 PREC=0x00 TTL=5
2 ID=1096 DF PROTO=TCP SPT=443 DPT=37790 WINDOW=62 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:00 -AB350-Gaming-3 kernel: [ 5134.126893] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=198.252.206.25 DST=192.168.2.196 LEN=113 TOS=0x08 PREC=0x00 TTL=5
2 ID=1097 DF PROTO=TCP SPT=443 DPT=37790 WINDOW=62 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:00 -AB350-Gaming-3 kernel: [ 5134.729285] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=198.252.206.25 DST=192.168.2.196 LEN=113 TOS=0x08 PREC=0x00 TTL=5
2 ID=1098 DF PROTO=TCP SPT=443 DPT=37790 WINDOW=62 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:01 -AB350-Gaming-3 kernel: [ 5135.321988] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=35.160.99.21 DST=192.168.2.196 LEN=83 TOS=0x00 PREC=0x00 TTL=227 
ID=5087 DF PROTO=TCP SPT=443 DPT=52118 WINDOW=118 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:01 -AB350-Gaming-3 kernel: [ 5135.630049] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=198.252.206.25 DST=192.168.2.196 LEN=113 TOS=0x08 PREC=0x00 TTL=5
2 ID=1099 DF PROTO=TCP SPT=443 DPT=37790 WINDOW=62 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:01 -AB350-Gaming-3 kernel: [ 5135.630677] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=35.160.99.21 DST=192.168.2.196 LEN=83 TOS=0x00 PREC=0x00 TTL=227 
ID=5088 DF PROTO=TCP SPT=443 DPT=52118 WINDOW=118 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:02 -AB350-Gaming-3 kernel: [ 5136.009273] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=35.160.99.21 DST=192.168.2.196 LEN=83 TOS=0x00 PREC=0x00 TTL=227 
ID=5089 DF PROTO=TCP SPT=443 DPT=52118 WINDOW=118 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:03 -AB350-Gaming-3 kernel: [ 5136.769047] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=35.160.99.21 DST=192.168.2.196 LEN=83 TOS=0x00 PREC=0x00 TTL=227 
ID=5090 DF PROTO=TCP SPT=443 DPT=52118 WINDOW=118 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:03 -AB350-Gaming-3 kernel: [ 5137.575243] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=198.252.206.25 DST=192.168.2.196 LEN=113 TOS=0x08 PREC=0x00 TTL=5
2 ID=1100 DF PROTO=TCP SPT=443 DPT=37790 WINDOW=62 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:31 -AB350-Gaming-3 kernel: [ 5164.817546] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=198.252.206.25 DST=192.168.2.196 LEN=113 TOS=0x08 PREC=0x00 TTL=5
2 ID=1103 DF PROTO=TCP SPT=443 DPT=37790 WINDOW=62 RES=0x00 ACK PSH URGP=0 
Mar 25 21:22:49 -AB350-Gaming-3 kernel: [ 5183.346821] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=01:00:5e:00:00:01:44:e9:dd:4d:5f:2c:08:00 SRC=192.168.2.1 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF
 PROTO=2 
Mar 25 21:23:02 -AB350-Gaming-3 kernel: [ 5196.046355] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=74:da:da:97:05:18:44:e9:dd:4d:5f:32:08:00 SRC=198.252.206.25 DST=192.168.2.196 LEN=113 TOS=0x08 PREC=0x00 TTL=5
2 ID=1104 DF PROTO=TCP SPT=443 DPT=37790 WINDOW=62 RES=0x00 ACK PSH URGP=0

Any advice on this issue would be appreciated.

Last edited by mojoman; 03-26-2019 at 07:41 AM..
# 2  
Old 03-26-2019
... the details of your Linux system are... exactly what?
# 3  
Old 03-26-2019
Quote:
Originally Posted by mojoman
The current issue is that whenever I lock the screen then come back after a long time I find it frozen.
There are a ton (and then some) different screen locks. Which one exactly do you use? If it is simple xlock it is probably something entirely different then what it might be with one of the "modern" contraptions that use seventeen different pseudo-connections through loopback and whatnot to achieve the same. So, which one do you use and how is it configured?

Quote:
Originally Posted by mojoman
There are tons of lines in journalctl and the kern.log like this just before I forcibly rebooted.

Code:
Gaming-3 kernel: [10847.185615] [UFW BLOCK] IN=wlx74dada970518 OUT= MAC=01:00:5e:00:00:01:44:e9:dd:4d:5f:2c:08:00 SRC=192.168.2.1 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID=0 DF PROTO=2

I am on a home network but there are several WIFI networks running. My parents have a home office. The network guy setup a reasonably sophisticated setup. The 192.x IP is my machines gateway. I have no idea what 224.0..0.1 is. I assume something on the network is trying to reach a device through my wireless adapter. Maybe a ping?
I just have the default rules in ufw enabled: Deny ALL incoming Allow ALL outgoing.
If I turn UFW off, disable it, my system has not frozen yet.
If you are on a home network i'd like to know what you exactly need a (host-based!) firewall for. Set aside the fact that host-based firewalls are nonsense anyway (and i suggest to set up your WLAN-router to do that instead if you need any at all) the firewall is useless probably as your WLAN-router is (i suppose) operating in NAT mode anyway. 224.0.0.x/8 was Microsofts idea for certain network-based services. I cannot say for sure from two packets but most probably this is some M$$ system discovering uPNP services or something such.

I am not a Linux specialist but to turn off services (like the watchdog and the firewall) you probably need some systemctl command to stop the respective services. You may first stop the service and then mask it so that it won't be started again. My suggestion is to restart the server after editing the services since this will immediately make sure that the server comes up in the way you have planned.


Quote:
Originally Posted by mojoman
Turning off logging does not work. I am not surprised. Logging would just eat up disk space not freeze the kernel.

I think the problem is that either watchdog was not disabled or UFW needs to be configured properly.
Perhaps so.

Quote:
Originally Posted by mojoman
I disabled UFW last night yet it still seems to be running this morning. The system locked up. The last lines in kern.log are a little different though. The source and destination IP's are different. How can I stop UFW from running?
After some digging into the systemd introduction found here I'd suggest something like:

Code:
systemctl stop ufw.service
systemctl mask ufw.service

but you probably want to check if there are any other services depending on it (i doubt it, but again, i am not a Linux crack), etc..

I hope this helps.

bakunin
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

[ufw] force all traffic through VPN

I am trying to force all my tun0's traffic through VPN but some some reason, the ufw is not working the way I want to. Below are the commands that I have executed.. I am able to connect to my SSH and NFS server but for some reason that I am unable to understand, I am unable to surf the net. ... (0 Replies)
Discussion started by: soichiro
0 Replies

2. UNIX for Advanced & Expert Users

Cp freezing from Seagate HDD to Win7

Hello all, Earlier I had a mac book and created a HFS+ file system on Seagate 1 TB external HDD, copied around 200 GB content. Now, I have a Windows 7 machine and wanted to copy the HDD contents to this new machine. Tried using MacDrive10 to mount HFS+ file system in Windows. Mouting is fine and... (1 Reply)
Discussion started by: matrixmadhan
1 Replies

3. Hardware

Laptop freezing issues

I am having Laptop freezing issues. Whenever I try to use Firfox and vlc, chrome and vlc, firefox and chrome, or anything similar to that my computer freezes. I always have to kill one of the processes before I can use my laptop again. I am guessing this is a hardware issue because when I move... (5 Replies)
Discussion started by: cokedude
5 Replies

4. Ubuntu

ubuntu kernel: [ 729.529501] [UFW ALLOW] ,[UFW AUDIT]

Hi , In our ubuntu server 10.10 ,we are getting below logs .Every day i need to restart server ,other wise it will not accessible.Some times ,i need to restart two times. When i ping google.com ,it was very slow .some times host not reachable .After reboot ,it will ping as good. ... (0 Replies)
Discussion started by: srinivasa
0 Replies

5. Red Hat

Mouse freezing after idle time

Hi All, I am having a problem where my mouse (USB) is freezing after some idle time, and I am having to reboot everytime that happens. I looked in the file /etc/X11/xorg.config to see if there is an entry for mouse and I could not find it. Instead I found the following entry: Section... (8 Replies)
Discussion started by: jxh461
8 Replies

6. SCO

X Server -> keyboard and mouse are freezing

hi I've configured X Server using Video Configuration Manager on SCO 5.0.6, but the keyboard and mouse are freezing after 5 minutes on the graphical login mask. ---------- Post updated at 01:59 PM ---------- Previous update was at 02:43 AM ---------- BTW I finished the configuration,... (2 Replies)
Discussion started by: ccc
2 Replies

7. UNIX for Dummies Questions & Answers

Ubuntu 9.10 FIrewall--is UFW allowing anything through by default?

Hi, I have enabled my UBUNTU 9.10 ufw. By default does it let anything through? I would think it allows all outbound originating requests through and allows for their return but it does not allow any inbound requests. Is this how it works? ---------- Post updated at 08:17 PM ----------... (1 Reply)
Discussion started by: mojoman
1 Replies

8. UNIX for Dummies Questions & Answers

UFW show args command

In ubuntu man page there is this command. What are values of ARGS I can use? (0 Replies)
Discussion started by: mojoman
0 Replies

9. SCO

SCO Unix 5.0.5 freezing

Hie I use SCO Unix 5.0.5 as my operating system and i have been having the following problem for the past couple of days : After every 3 hours or more , my system freezes and all users are locked out .I can not do anything even on the console . Each time i have to press the reset button... (2 Replies)
Discussion started by: babby
2 Replies

10. UNIX for Dummies Questions & Answers

CDE freezing

I am running Solaris 8 intel and recently my Common Desktop environment will not load. I enter the root username and password at the prompt, it switches to the CDE screen and the freezes. The OpenWindows environment works fine. I tried with a regular username (not root) and I get the same resutls.... (2 Replies)
Discussion started by: dangral
2 Replies
Login or Register to Ask a Question