奇怪的网络问题

grins

那就记住使用telnet server port来判断某端口是否打开吧，打开了显示“]”，没开telnet没有响应；

还是回到主题吧

briangao

原帖由 grins 于 2006-12-5 03:01 发表


如主题中所写，我以一台windows笔记本设置为和故障服务器一样的网络参数，然后接上故障服务器的网线，可以正常上网。
但为何这台solaris的对外访问就是出不了网关呢？

局域网中其它的solaris和windows一样 ...

When you access www.sina.com.cn from your laptop, how did you do that? Was that from a browser or through telnet www.sina.com.cn? If you were using a browser, you may have used a proxy server. Check your proxy setting in the browser.
If you don't have a proxy, then we need to go through the following steps to get to the bottom of your issue.

1. Hook up your laptop with the same setting as your Solaris server. In the command window, type ipconfig /all
2. Type  route print
3. ping your default gateway
4. Type arp -a
5. Type nslookup www.sina.com.cn
6. Type tracert www.sina.com.cn
7. telnet www.sina.com.cn 80
8. While the above telnet is still running, in another command window, type netstat -na|find /i "80"


Now hook up your Sun server with the same setting

9. Type ifconfig -a
10. netstat -nr
11. ping your default gateway
12. ping 224.0.0.1
13. arp -a
14. nslookup www.sina.com.cn
15. traceroute www.sina.com.cn
16. Do a snoop when ping www.sina.com.cn
17. If you can't ping, do a snoop -v when you ping www.sina.com.cn
18. Do a snoop when telnet www.sina.com.cn 80
19. When the above telnet is still going, type netstat –na|grep –i 80 in another terminal window
20. If you can't telnet to port 80 of www.sina.com.cn, do a snoop -v when telneting to www.sina.com.cn 80

Post your result here.

grins

早上新浪访问不了，现改用newsmth.org做测试

笔记本：

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : fdisyd6
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter 本地连接:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controller
        Physical Address. . . . . . . . . : 00-13-72-9C-01-3E
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.11.40
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.11.1
        DNS Servers . . . . . . . . . . . : 192.168.10.28
                                            192.168.10.29
        NetBIOS over Tcpip. . . . . . . . : Disabled


C:\Documents and Settings\Administrator>route print
=============================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 13 72 9c 01 3e ...... Broadcom NetXtreme 57xx Gigabit Controller
=============================================================
=============================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.11.1  192.168.11.40       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
     192.168.11.0    255.255.255.0    192.168.11.40   192.168.11.40       20
    192.168.11.40  255.255.255.255        127.0.0.1       127.0.0.1       20
   192.168.11.255  255.255.255.255    192.168.11.40   192.168.11.40       20
        224.0.0.0        240.0.0.0   192.168.11.40  192.168.11.40       20
  255.255.255.255  255.255.255.255   192.168.11.40  192.168.11.40       1
Default Gateway:      192.168.11.1
============================================================
Persistent Routes:
  None



C:\Documents and Settings\Administrator>ping 192.168.11.1

Pinging 192.168.11.1 with 32 bytes of data:

Reply from 192.168.11.1: bytes=32 time=1ms TTL=255
Reply from 192.168.11.1: bytes=32 time=1ms TTL=255
Reply from 192.168.11.1: bytes=32 time=3ms TTL=255
Reply from 192.168.11.1: bytes=32 time=11ms TTL=255

Ping statistics for 192.168.11.1:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 1ms, Maximum = 11ms, Average = 4ms


C:\Documents and Settings\Administrator>arp -a

Interface: 192.168.11.40 --- 0x10003
  Internet Address      Physical Address      Type
  192.168.11.1          00-e0-fc-1c-60-62     dynamic




C:\Documents and Settings\Administrator>nslookup newsmth.org
Server: abc.local
Address:  192.168.10.28

Non-authoritative answer:
Name:    newsmth.org
Address:  60.2.251.8




C:\Documents and Settings\Administrator>tracert newsmth.org

Tracing route to newsmth.org [60.2.251.8]
over a maximum of 30 hops:

  1     1 ms     1 ms     1 ms  192.168.11.1
  2    <1 ms    <1 ms    <1 ms  172.16.8.25
  3     1 ms     1 ms     1 ms  172.16.8.21
  7     1 ms     1 ms    <1 ms  202.99.57.113
  9     1 ms     1 ms     1 ms  210.74.178.201
10     1 ms     1 ms     1 ms  rtr-bto-a-s9-0-1.bta.net.cn [202.106.192.169]
11     1 ms     1 ms     1 ms  202.96.12.13
12    16 ms    16 ms    16 ms  219.158.7.74
13    16 ms    16 ms    16 ms  61.182.172.98
14    10 ms    10 ms     9 ms  218.12.255.118
15     *        *        *     Request timed out.
16    16 ms    16 ms    16 ms  60.2.251.8

Trace complete.



C:\Documents and Settings\Administrator>telnet www.sina.com.cn 80


C:\Documents and Settings\Administrator>netstat -an|find /i "80"
  TCP    192.168.11.40:1305    60.2.251.8:80          ESTABLISHED

Sun solaris:

# ifconfig -a
lo0: flags=1000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4> mtu 8232 index 1
        inet 127.0.0.1 netmask ff000000
eri0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
        inet 192.168.11.40 netmask ffffff00 broadcast 192.168.11.255
        ether 0:3:ba:36:22:6a

# netstat -nr
Routing Table: IPv4
  Destination           Gateway           Flags  Ref   Use   Interface
-------------------- -------------------- ----- ----- ------ ---------
192.168.11.0         192.168.11.40        U         1   1701  eri0
224.0.0.0            192.168.11.40        U         1      0  eri0
default              192.168.11.1         UG        1   1729  
127.0.0.1            127.0.0.1            UH       282544020  lo0

# ping 192.168.11.1
192.168.11.1 is alive

# ping 224.0.0.1
224.0.0.1 is alive

# arp -a
Net to Media Table: IPv4
Device   IP Address               Mask      Flags   Phys Addr
------ -------------------- --------------- ----- ---------------
eri0   all-systems.mcast.net 255.255.255.255       01:00:5e:00:00:01
eri0   192.168.11.1         255.255.255.255       00:e0:fc:1c:60:62
eri0   wtapp                255.255.255.255 SP    00:03:ba:36:22:6a
eri0   base-address.mcast.net 240.0.0.0       SM    01:00:5e:00:00:00

# nslookup newsmth.org
Server:  abc.local
Address:  192.168.10.28
Non-authoritative answer:
Name:    newsmth.org
Address:  60.2.251.8

# traceroute newsmth.org
traceroute to newsmth.org (60.2.251.8), 30 hops max, 40 byte packets
1  192.168.11.1 (192.168.11.1)  1.217 ms  1.709 ms  1.141 ms
2  * * *
3  * *


# ping newsmth.org
newsmth.org is alive

while:
# snoop wtapp newsmth.org
Using device /dev/eri (promiscuous mode)
       wtapp -> 60.2.251.8   ICMP Echo request (ID: 12399 Sequence number: 0)
  60.2.251.8 -> wtapp        ICMP Echo reply (ID: 12399 Sequence number: 0)


# ping newsmth.org
newsmth.org is alive

while:
# snoop -v wtapp newsmth.org
Using device /dev/eri (promiscuous mode)
ETHER:  ---- Ether Header -----
ETHER:  
ETHER:  Packet 1 arrived at 8:44:52.01
ETHER:  Packet size = 98 bytes
ETHER:  Destination = 0:e0:fc:1c:60:62,
ETHER:  Source      = 0:3:ba:36:22:6a,
ETHER:  Ethertype = 0800 (IP)
ETHER:  
IP:   ----- IP Header -----
IP:   
IP:   Version = 4
IP:   Header length = 20 bytes
IP:   Type of service = 0x00
IP:         xxx. .... = 0 (precedence)
IP:         ...0 .... = normal delay
IP:         .... 0... = normal throughput
IP:         .... .0.. = normal reliability
IP:         .... ..0. = not ECN capable transport
IP:         .... ...0 = no ECN congestion experienced
IP:   Total length = 84 bytes
IP:   Identification = 64873
IP:   Flags = 0x4
IP:         .1.. .... = do not fragment
IP:         ..0. .... = last fragment
IP:   Fragment offset = 0 bytes
IP:   Time to live = 255 seconds/hops
IP:   Protocol = 1 (ICMP)
IP:   Header checksum = 7b63
IP:   Source address = 192.168.11.40, wtapp
IP:   Destination address = 60.2.251.8, 60.2.251.8
IP:   No options
IP:   
ICMP:  ----- ICMP Header -----
ICMP:  
ICMP:  Type = 8 (Echo request)
ICMP:  Code = 0 (ID: 12381 Sequence number: 0)
ICMP:  Checksum = 40c3
ICMP:  

ETHER:  ----- Ether Header -----
ETHER:  
ETHER:  Packet 2 arrived at 8:44:52.03
ETHER:  Packet size = 98 bytes
ETHER:  Destination = 0:3:ba:36:22:6a,
ETHER:  Source      = 0:e0:fc:1c:60:62,
ETHER:  Ethertype = 0800 (IP)
ETHER:  
IP:   ----- IP Header -----
IP:   
IP:   Version = 4
IP:   Header length = 20 bytes
IP:   Type of service = 0x00
IP:         xxx. .... = 0 (precedence)
IP:         ...0 .... = normal delay
IP:         .... 0... = normal throughput
IP:         .... .0.. = normal reliability
IP:         .... ..0. = not ECN capable transport
IP:         .... ...0 = no ECN congestion experienced
IP:   Total length = 84 bytes
IP:   Identification = 39323
IP:   Flags = 0x0
IP:         .0.. .... = may fragment
IP:         ..0. .... = last fragment
IP:   Fragment offset = 0 bytes
IP:   Time to live = 50 seconds/hops
IP:   Protocol = 1 (ICMP)
IP:   Header checksum = ec32
IP:   Source address = 60.2.251.8, 60.2.251.8
IP:   Destination address = 192.168.11.40, wtapp
IP:   No options
IP:   
ICMP:  ----- ICMP Header -----
ICMP:  
ICMP:  Type = 0 (Echo reply)
ICMP:  Code = 0 (ID: 12381 Sequence number: 0)
ICMP:  Checksum = 48c3
ICMP:  


# telnet newsmth.org
Trying 60.2.251.8...
^C

while:
# snoop -v wtapp newsmth.org
Using device /dev/eri (promiscuous mode)
ETHER:  ----- Ether Header -----
ETHER:  
ETHER:  Packet 1 arrived at 8:46:8.35
ETHER:  Packet size = 62 bytes
ETHER:  Destination = 0:e0:fc:1c:60:62,
ETHER:  Source      = 0:3:ba:36:22:6a,
ETHER:  Ethertype = 0800 (IP)
ETHER:  
IP:   ----- IP Header -----
IP:   
IP:   Version = 4
IP:   Header length = 20 bytes
IP:   Type of service = 0x00
IP:         xxx. .... = 0 (precedence)
IP:         ...0 .... = normal delay
IP:         .... 0... = normal throughput
IP:         .... .0.. = normal reliability
IP:         .... ..0. = not ECN capable transport
IP:         .... ...0 = no ECN congestion experienced
IP:   Total length = 48 bytes
IP:   Identification = 64874
IP:   Flags = 0x4
IP:         .1.. .... = do not fragment
IP:         ..0. .... = last fragment
IP:   Fragment offset = 0 bytes
IP:   Time to live = 64 seconds/hops
IP:   Protocol = 6 (TCP)
IP:   Header checksum = 3a82
IP:   Source address = 192.168.11.40, wtapp
IP:   Destination address = 60.2.251.8, 60.2.251.8
IP:   No options
IP:   
TCP:  ----- TCP Header -----
TCP:  
TCP:  Source port = 49784
TCP:  Destination port = 23 (TELNET)
TCP:  Sequence number = 3520419626
TCP:  Acknowledgement number = 0
TCP:  Data offset = 28 bytes
TCP:  Flags = 0x02
TCP:        0... .... = No ECN congestion window reduced
TCP:        .0.. .... = No ECN echo
TCP:        ..0. .... = No urgent pointer
TCP:        ...0 .... = No acknowledgement
TCP:        .... 0... = No push
TCP:        .... .0.. = No reset
TCP:        .... ..1. = Syn
TCP:        .... ...0 = No Fin
TCP:  Window = 49640
TCP:  Checksum = 0x02fe
TCP:  Urgent pointer = 0
TCP:  Options: (8 bytes)
TCP:    - Maximum segment size = 1460 bytes
TCP:    - No operation
TCP:    - No operation
TCP:    - SACK permitted option
TCP:  
TELNET:  ----- TELNET:   -----
TELNET:  
TELNET:  ""
TELNET:  

ETHER:  ----- Ether Header -----
ETHER:  
ETHER:  Packet 2 arrived at 8:46:11.72
ETHER:  Packet size = 62 bytes
ETHER:  Destination = 0:e0:fc:1c:60:62,
ETHER:  Source      = 0:3:ba:36:22:6a,
ETHER:  Ethertype = 0800 (IP)
ETHER:  
IP:   ----- IP Header -----
IP:   
IP:   Version = 4
IP:   Header length = 20 bytes
IP:   Type of service = 0x00
IP:         xxx. .... = 0 (precedence)
IP:         ...0 .... = normal delay
IP:         .... 0... = normal throughput
IP:         .... .0.. = normal reliability
IP:         .... ..0. = not ECN capable transport
IP:         .... ...0 = no ECN congestion experienced
IP:   Total length = 48 bytes
IP:   Identification = 64875
IP:   Flags = 0x4
IP:         .1.. .... = do not fragment
IP:         ..0. .... = last fragment
IP:   Fragment offset = 0 bytes
IP:   Time to live = 64 seconds/hops
IP:   Protocol = 6 (TCP)
IP:   Header checksum = 3a81
IP:   Source address = 192.168.11.40, wtapp
IP:   Destination address = 60.2.251.8, 60.2.251.8
IP:   No options
IP:   
TCP:  ----- TCP Header -----
TCP:  
TCP:  Source port = 49784
TCP:  Destination port = 23 (TELNET)
TCP:  Sequence number = 3520419626
TCP:  Acknowledgement number = 0
TCP:  Data offset = 28 bytes
TCP:  Flags = 0x02
TCP:        0... .... = No ECN congestion window reduced
TCP:        .0.. .... = No ECN echo
TCP:        ..0. .... = No urgent pointer
TCP:        ...0 .... = No acknowledgement
TCP:        .... 0... = No push
TCP:        .... .0.. = No reset
TCP:        .... ..1. = Syn
TCP:        .... ...0 = No Fin
TCP:  Window = 49640
TCP:  Checksum = 0x02fe
TCP:  Urgent pointer = 0
TCP:  Options: (8 bytes)
TCP:    - Maximum segment size = 1460 bytes
TCP:    - No operation
TCP:    - No operation
TCP:    - SACK permitted option
TCP:  
TELNET:  ----- TELNET:   -----
TELNET:  
TELNET:  ""
TELNET:  

ETHER:  ----- Ether Header -----
ETHER:  
ETHER:  Packet 3 arrived at 8:46:18.47
ETHER:  Packet size = 62 bytes
ETHER:  Destination = 0:e0:fc:1c:60:62,
ETHER:  Source      = 0:3:ba:36:22:6a,
ETHER:  Ethertype = 0800 (IP)
ETHER:  
IP:   ----- IP Header -----
IP:   
IP:   Version = 4
IP:   Header length = 20 bytes
IP:   Type of service = 0x00
IP:         xxx. .... = 0 (precedence)
IP:         ...0 .... = normal delay
IP:         .... 0... = normal throughput
IP:         .... .0.. = normal reliability
IP:         .... ..0. = not ECN capable transport
IP:         .... ...0 = no ECN congestion experienced
IP:   Total length = 48 bytes
IP:   Identification = 64876
IP:   Flags = 0x4
IP:         .1.. .... = do not fragment
IP:         ..0. .... = last fragment
IP:   Fragment offset = 0 bytes
IP:   Time to live = 64 seconds/hops
IP:   Protocol = 6 (TCP)
IP:   Header checksum = 3a80
IP:   Source address = 192.168.11.40, wtapp
IP:   Destination address = 60.2.251.8, 60.2.251.8
IP:   No options
IP:   
TCP:  ----- TCP Header -----
TCP:  
TCP:  Source port = 49784
TCP:  Destination port = 23 (TELNET)
TCP:  Sequence number = 3520419626
TCP:  Acknowledgement number = 0
TCP:  Data offset = 28 bytes
TCP:  Flags = 0x02
TCP:        0... .... = No ECN congestion window reduced
TCP:        .0.. .... = No ECN echo
TCP:        ..0. .... = No urgent pointer
TCP:        ...0 .... = No acknowledgement
TCP:        .... 0... = No push
TCP:        .... .0.. = No reset
TCP:        .... ..1. = Syn
TCP:        .... ...0 = No Fin
TCP:  Window = 49640
TCP:  Checksum = 0x02fe
TCP:  Urgent pointer = 0
TCP:  Options: (8 bytes)
TCP:    - Maximum segment size = 1460 bytes
TCP:    - No operation
TCP:    - No operation
TCP:    - SACK permitted option
TCP:  
TELNET:  ----- TELNET:   -----
TELNET:  
TELNET:  ""
TELNET:  

briangao

The first difference I see is that you couldn't traceroute to newsmth.org while you could tracert to it. Traditionaly windows tracert uses ICMP and Unix traceroute uses UDP high ports. However, this may have been chaanged. So I need you to do traceroute -v -I  -i eri0  -q 1 newsmth.org and then in a separate command, do snoop -v when you are doing just traceroute -v -i eri0 -q 1 newsmth.org. The -I option in the first run forces ICMP protocol.
  
Also, please telnet to port 80 of newsmth.org instead of just telnet and do a snoop -v of it.

The Solaris release you are using is Solaris 9 Dec of 2002 (really old). Did you patch it? If not, you may want at least install recommened patch cluster. Otherwise weird thing like this could happen. If you'd like to post the patch info, you could show me uname -a and showrev -p output.

This problem is really weird. At this time I'm still not convinced that it is necessary a server based problem even though it could be. It still could be a network problem, such as your network device is blocking UDP high ports. You have two network devices between your server and the internet, one is 192.168.11.1 and the other is  172.16.8.21 (or external IP 202.99.57.113). The most effective way of troubleshooting the problem is actually monitor the traffic on these network devices. Even it turns out that it is your server's problem, you can tell it better from the logs on these devices. Without accessing to them, we are dancing around to figure it out. I strongly recommend that you get your network admin involved.

grins

这台sun不是我们部署的，补丁好像有问题

# uname -a
SunOS wtapp 5.9 Generic_112233-03 sun4u sparc SUNW,Sun-Fire-280R
# showrev -p
Patch: 112233-03 Obsoletes: 112737-03, 113150-03, 113156-01, 113158-01, 113159-01, 113163-01 Requires:  Incompatibles:  Packages: SUNWcar, SUNWcsu, SUNWcsr, FJSVhea, SUNWcsxu, SUNWmdb, SUNWcarx, SUNWhea, SUNWmdbx
Patch: 112908-04 Obsoletes: 112726-03 Requires: 112907-01 Incompatibles:  Packages: SUNWcar, SUNWgssk, SUNWcarx, SUNWcstl, SUNWcstlx, SUNWgsskx, SUNWkrbu, SUNWkrbux
Patch: 112961-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcar, SUNWcarx
Patch: 113077-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcar, SUNWcarx
Patch: 113218-04 Obsoletes:  Requires: 112233-02 Incompatibles:  Packages: SUNWcar, SUNWcsr, SUNWcarx
Patch: 113219-01 Obsoletes:  Requires: 112233-01 Incompatibles:  Packages: SUNWcar, SUNWcarx
Patch: 112835-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 112905-02 Obsoletes: 112713-02 Requires: 112233-01 Incompatibles:  Packages: SUNWcsu, SUNWcsr, SUNWcsxu, SUNWcarx, SUNWhea
Patch: 112917-01 Obsoletes: 112702-02 Requires:  Incompatibles:  Packages: SUNWcsu, SUNWcsxu
Patch: 112918-01 Obsoletes: 112703-02 Requires:  Incompatibles:  Packages: SUNWcsu, SUNWhea
Patch: 112919-01 Obsoletes: 112704-02 Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 112963-03 Obsoletes: 112833-01 Requires:  Incompatibles:  Packages: SUNWcsu, SUNWcsr, SUNWcsl, SUNWcsxu, SUNWosdem, SUNWcslx, SUNWtoo, SUNWbtool, SUNWarc, SUNWtoox, SUNWbtoox, SUNWhea
Patch: 112964-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 112967-04 Obsoletes:  Requires: 112233-01 Incompatibles:  Packages: SUNWcsu, SUNWncar, SUNWncarx, SUNWncau, SUNWncaux
Patch: 112968-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 112998-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113031-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu, SUNWxcu4
Patch: 113032-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu, SUNWcsr
Patch: 113071-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113072-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113225-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113280-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113323-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113326-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu, SUNWsutl
Patch: 113330-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113451-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu, SUNWcsl, SUNWcstl
Patch: 113471-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu, SUNWesu, SUNWmdb, SUNWtoo, SUNWrmwbu, SUNWscpu, SUNWtnfc, SUNWtoox, SUNWcpcu
Patch: 113492-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113494-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113496-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113576-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 113577-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu, SUNWcsxu
Patch: 113580-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu, SUNWcsr
Patch: 113713-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 112911-02 Obsoletes: 112652-03, 113155-01 Requires: 112912-01 Incompatibles:  Packages: SUNWcsu, SUNWcsr, SUNWhea
Patch: 112914-04 Obsoletes: 112698-02, 113153-01 Requires: 112911-02 Incompatibles:  Packages: SUNWcsu, SUNWcsr, SUNWroute
Patch: 113456-01 Obsoletes: 113006-01 Requires: 113073-02, 113276-02 Incompatibles:  Packages: SUNWcsu, SUNWcsxu
Patch: 112834-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx, SUNWhea
Patch: 112854-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 112874-09 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcsl, SUNWcslx, SUNWarc, SUNWarcx, SUNWcstl, SUNWcstlx, SUNWdpl, SUNWdplx
Patch: 112902-07 Obsoletes: 112653-04 Requires: 112233-01 Incompatibles:  Packages: SUNWcsr, SUNWcarx, SUNWhea
Patch: 112903-02 Obsoletes: 112687-02 Requires: 112902-01 Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 112904-01 Obsoletes: 112701-02 Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 112906-01 Obsoletes: 112714-02 Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx, SUNWhea
Patch: 112920-02 Obsoletes: 112712-02 Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcsl, SUNWmdb, SUNWcslx, SUNWarc, SUNWarcx, SUNWcstl, SUNWcstlx, SUNWhea, SUNWmdbx
Patch: 112954-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 112969-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWvolr
Patch: 112971-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 112975-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx, SUNWhea
Patch: 113030-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 113033-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx, SUNWhea
Patch: 113275-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 113277-03 Obsoletes:  Requires: 112233-02, 112834-02 Incompatibles:  Packages: SUNWcsr, SUNWssad, SUNWssadx, SUNWcarx, SUNWhea
Patch: 113324-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx, SUNWhea
Patch: 113328-01 Obsoletes:
Patch: 113335-01 Obsoletes:  
Patch: 113449-01 Obsoletes:  
Patch: 113453-02 Obsoletes:  
Patch: 113454-04 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 113459-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 113467-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 113482-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr
Patch: 113073-02 Obsoletes: 113005-02 Requires: 113454-01 Incompatibles:  Packages: SUNWcsr, SUNWcarx
Patch: 113477-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr, SUNWdrr
Patch: 112839-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcslx
Patch: 112912-01 Obsoletes: 112688-02 Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcstl
Patch: 112958-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcslx, SUNWcstl, SUNWcstlx
Patch: 112960-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWnisu, SUNWcslx, SUNWhea
Patch: 112962-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcslx
Patch: 112970-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcslx
Patch: 113029-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcslx, SUNWcstl, SUNWcstlx
Patch: 113274-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl
Patch: 113319-04 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcslx, SUNWarc
Patch: 113475-02 Obsoletes: 113165-01 Requires: 112874-06 Incompatibles:  Packages: SUNWcsl, SUNWcslx
Patch: 113476-04 Obsoletes: 113152-01, 113166-01 Requires: 112874-06, 112960-03 Incompatibles:  Packages: SUNWcsl, SUNWcslx
Patch: 113480-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcslx
Patch: 113493-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsl, SUNWcslx
Patch: 113432-03 Obsoletes:  Requires:  Incompatibles:  Packages: FJSVhea, FJSVcpc, FJSVcpcx, FJSVmdb
Patch: 113543-01 Obsoletes:  Requires:  Incompatibles:  Packages: FJSVhea
Patch: 113221-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWkvm
Patch: 113332-03 Obsoletes: 113540-01 Requires:  Incompatibles:  Packages: SUNWkvm, SUNWkvmx
Patch: 113447-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWkvm
Patch: 113495-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWkvm, SUNWkvmx
Patch: 113578-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWkvm
Patch: 113279-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWnfscr, SUNWnfscx, SUNWhea
Patch: 113318-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWnfscr, SUNWnfscx
Patch: 113278-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWnfscu, SUNWnfssu
Patch: 113222-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWnfssr, SUNWnfssx
Patch: 113331-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWnfssu
Patch: 113281-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWnisu
Patch: 113481-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWnisu
Patch: 113075-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWesu, SUNWesxu
Patch: 113472-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWesu, SUNWesxu
Patch: 113470-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWxwdv, SUNWxwdvx
Patch: 112785-09 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWxwfnt, SUNWxwplt, SUNWxwplx, SUNWxwsrv
Patch: 111722-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWlibms, SUNWlmsx, SUNWlibm
Patch: 113096-02 Obsoletes:  Requires: 112785-05 Incompatibles:  Packages: SUNWxwplt
Patch: 113098-03 Obsoletes:  Requires: 112785-05, 113096-01 Incompatibles:  Packages: SUNWxwplt, SUNWxwplx, SUNWxwrtl, SUNWxwinc, SUNWxwrtx
Patch: 113100-01 Obsoletes:  Requires: 113096-01 Incompatibles:  Packages: SUNWxwplt, SUNWxwsrv
Patch: 113374-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWxwplt
Patch: 113541-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWxwplt
Patch: 112783-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWxwopt
Patch: 112787-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWxwopt
Patch: 112771-05 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmfrun, SUNWdtbax
Patch: 112805-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtbas, SUNWdtab, SUNWdthev, SUNWdthez
Patch: 112812-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtbas, SUNWdtdte
Patch: 111711-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWlibC
Patch: 112926-03 Obsoletes: 112732-02 Requires:  Incompatibles:  Packages: SUNWocfr, SUNWocf, SUNWocfh, SUNWocfx, SUNWcstl, SUNWcstlx
Patch: 112808-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWtltk, SUNWtltkx
Patch: 112811-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWolrte
Patch: 113572-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdoc
Patch: 113321-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWluxd, SUNWluxdx, SUNWhea, SUNWluxl, SUNWluxlx
Patch: 112622-05 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWm64, SUNWm64x, SUNWm64cf, SUNWm64w
Patch: 113028-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWosdem, SUNWqos, SUNWqosx
Patch: 113742-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmc
Patch: 112945-05 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWwbapi, SUNWwbcou, SUNWwbpro, SUNWmga, SUNWpmgr, SUNWwbdev
Patch: 113026-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmdr, SUNWmdx
Patch: 113069-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmdr, SUNWhea, SUNWmdx
Patch: 113276-02 Obsoletes:  Requires: 113454-01 Incompatibles:  Packages: SUNWmdr, SUNWmdx
Patch: 113282-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmdu
Patch: 113333-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmdu
Patch: 113491-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmdu
Patch: 113434-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWadmc
Patch: 113628-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWadmc
Patch: 112951-04 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWswmt
Patch: 112807-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtdte
Patch: 112943-04 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWlvma, SUNWlvmg
Patch: 113320-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWpd, SUNWpdx
Patch: 112617-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtdmn
Patch: 113020-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNW5ttf, SUNWinleu, SUNWinlex, SUNWinttf, SUNWcttf, SUNWkttf, SUNWtleu, SUNWtleux
Patch: 113025-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWpiclu
Patch: 113573-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWpiclu
Patch: 113574-01 Obsoletes:  Requires: 113573-01 Incompatibles:  Packages: SUNWpiclu
Patch: 113024-02 Obsoletes:  Requires: 112233-01 Incompatibles:  Packages: SUNWwrsmx
Patch: 112601-04 Obsoletes:  Requires:  Incompatibles:  Packages: TSIpgx, TSIpgxx, TSIpgxw
Patch: 113325-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWpmu
Patch: 112806-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtdst
Patch: 112810-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtdst
Patch: 113799-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWsregu
Patch: 112661-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWiiimu, SUNWiiimr, SUNWxi18n, SUNWxim, SUNWxi18x, SUNWximx, SUNWj3irt
Patch: 112915-01 Obsoletes: 112699-02 Requires:  Incompatibles:  Packages: SUNWrcmdc
Patch: 112941-03 Obsoletes: 112949-01, 113358-01 Requires:  Incompatibles:  Packages: SUNWadmap
Patch: 113327-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWpppdu
Patch: 112620-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWafb, SUNWafbw, SUNWafbx
Patch: 113329-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWpsu
Patch: 112764-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWqfed, SUNWqfedu, SUNWqfedx
Patch: 113146-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWapchr, SUNWapchu, SUNWapchd
Patch: 112875-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWrcmds
Patch: 112916-01 Obsoletes: 112700-02 Requires:  Incompatibles:  Packages: SUNWroute
Patch: 112928-01 Obsoletes: 112738-02 Requires:  Incompatibles:  Packages: SUNWroute
Patch: 112907-01 Obsoletes: 112724-03 Requires:  Incompatibles:  Packages: SUNWgss, SUNWgssk, SUNWgssx, SUNWgsskx
Patch: 112972-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmibii, SUNWsasnm, SUNWsasnx
Patch: 113070-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWbip
Patch: 112837-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdhcsu
Patch: 113076-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdhcm
Patch: 112809-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWjmfp
Patch: 113575-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWsndmr, SUNWsndmu
Patch: 111703-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWsprot, SUNWsprox, SUNWxcu4t
Patch: 113581-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcddte
Patch: 112804-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtezt
Patch: 113090-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcdft
Patch: 113273-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWsshdu
Patch: 113061-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWeuluf, SUNWeulux
Patch: 112840-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcarx
Patch: 112955-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcarx, SUNWatfsr
Patch: 112987-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcarx
Patch: 113068-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcarx
Patch: 113220-01 Obsoletes:  Requires: 112233-01 Incompatibles:  Packages: SUNWcarx
Patch: 113445-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcarx
Patch: 113446-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcarx
Patch: 113489-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcarx
Patch: 113021-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcleu, SUNWcleux, SUNWcleex, SUNWcleue
Patch: 113085-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWtxfnt
Patch: 112985-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWclvmg
Patch: 113334-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWudfr, SUNWudfrx
Patch: 113490-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWaudd, SUNWauddx, SUNWaudh
Patch: 112868-05 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcos
Patch: 112836-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWusb, SUNWusbx
Patch: 113322-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWbnuu
Patch: 112817-06 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcea, SUNWceax, SUNWcedu, SUNWced, SUNWcedx
Patch: 112966-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWvolu
Patch: 113086-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWciu8, SUNWciu8x
Patch: 113484-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcwdev
Patch: 112921-01 Obsoletes: 112725-02 Requires: 112908-01 Incompatibles:  Packages: SUNWcstl, SUNWcstlx, SUNWkdcu, SUNWkrbu, SUNWkrbux
Patch: 112922-01 Obsoletes: 112728-02 Requires: 112908-01 Incompatibles:  Packages: SUNWcstl, SUNWkdcu, SUNWkrbu
Patch: 113087-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcxplt
Patch: 113088-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcxplt
Patch: 112927-01 Obsoletes: 112733-02 Requires:  Incompatibles:  Packages: SUNWhea
Patch: 112929-01 Obsoletes: 112739-02 Requires:  Incompatibles:  Packages: SUNWhea
Patch: 112965-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWhea, SUNWeridx
Patch: 113457-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWhea
Patch: 113464-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWhea
Patch: 113168-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWjxmft, SUNWjxcft
Patch: 113513-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWxwpsr
Patch: 113483-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWypu
Patch: 113579-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWypu
Patch: 113145-02 Obsoletes:  Requires:  Incompatibles:  Packages: NATEvplr
Patch: 113571-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWefclx, SUNWdrcrx
Patch: 112838-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWefcx
Patch: 113224-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWefcux
Patch: 112621-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWffbw, SUNWffb, SUNWffbx
Patch: 113503-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWced, SUNWcedx
Patch: 112959-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWfruid, SUNWfruix
Patch: 113027-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWfruid, SUNWfruix
Patch: 111712-01 Obsoletes:  Requires: 111711-01 Incompatibles:  Packages: SUNWlibCx
Patch: 113361-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWged, SUNWgedu, SUNWgedx
Patch: 112565-08 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWgfbcf, SUNWgfb, SUNWgfbr, SUNWgfbw, SUNWgfbx
Patch: 112841-04 Obsoletes: 112736-03 Requires: 112840-01 Incompatibles:  Packages: SUNWdrcrx
Patch: 113074-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdrr
Patch: 113538-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdrr, SUNWdrrx
Patch: 112913-01 Obsoletes: 112696-02 Requires:  Incompatibles:  Packages: SUNWfruip
Patch: 113488-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWfruip
Patch: 113226-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWhmd, SUNWhmdx
Patch: 113223-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWidn, SUNWidnx
Patch: 112540-06 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWifb, SUNWifbx, SUNWifbcf, SUNWifbw
Patch: 113313-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWinst
Patch: 113504-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWinst
Patch: 112923-02 Obsoletes: 112729-02 Requires: 112908-01 Incompatibles:  Packages: SUNWkdcu, SUNWkrbu
Patch: 112925-02 Obsoletes: 112731-02 Requires: 112908-01 Incompatibles:  Packages: SUNWkdcu, SUNWkrbu
Patch: 112924-01 Obsoletes: 112730-02 Requires: 112908-01 Incompatibles:  Packages: SUNWkrbu

briangao

Wow. 112233-03 is way too old. The current kernel patch level for your release of Solaris is 112233-12. No matter whether this is related to your problem or not, you may ask whomever deployed the machine to update the kernel patch and recommended patch cluster.

grins

目前这并不是一个必须解决的故障。
涉及到打补丁升级内核，对于这台生产服务器来说，冒然升级恐怕还要慎重对待。
很遗憾，问题的解决恐怕只能到这一步了。
感谢briangao ，向你学习！

rocket7711

我遇到过类似的问题，防火墙用的是juniper的！当时就是同样的设置用pc机能访问internet,用sun的机器能ping通但是访问不了，telnet www.sina.com.cn 80端口有响应，和你这个现象应该是一样的。
你再试一下像baidu或google这样页面较小的网站是不是可以访问！如果可以的话应该还是你防火墙的问题。
当时我们改过防火墙的tcp mss的值有一些效果！但是当sun能访问后windows又不行！搞了几天都没解决，最后实在没办法了，才怀疑到硬件，更换一台同样的防火墙倒入原防火墙的配置,问题解决！

[ 本帖最后由 rocket7711 于 2006-12-7 17:50 编辑 ]