Welcome, Register for free! or Login below:
EduGeek.net RSS Feeds Register FAQ Members Social Groups User Map Calendar Search Today's Posts Mark Forums Read

Internet Related/Filtering/Firewall

Internet Related forum sponsored by
Internet Related Forum Sponsored by Smoothwall

Woes with your internet connection or maybe having filtering issues (that are not security related) post them here.

Go Back   EduGeek.net Forums > Technical > Internet Related/Filtering/Firewall
Reply
 
LinkBack Thread Tools Search Thread
Sponsored Links
Old 27-11-2009, 10:01 AM   #1
 
mmoseley's Avatar
 
Join Date: Apr 2007
Posts: 224
uk
Thanks: 6
Thanked 11 Times in 5 Posts
Rep Power: 7 mmoseley will become famous soon enough
Default SmoothWall Constant Outgoing problem

Morning All!

Sorry about the vague title! it was hard to describe in a short blurb what i was talking about!

Over the past few days we've been experiencing a HIGH level of output to the internet from the smoothwall, on the main page the little graph shows a constant 200kbps! so look at the traffic logs...nothing of any concern showing there...

Checked the reports on the bandwidth by user and it shows "-" which i had banned over a previous problem anyway (so should that show up???)....and it also shows a huge chunk being taken up by "others" but i dont know what "others" means..!

Anybody got any ideas?

Ta very much! and have a great weekend guys...i can feel a few beers happening this weekend!! lol

Mart
  Reply With Quote
Old 27-11-2009, 10:10 AM   #2
 
Richbrown's Avatar
 
Join Date: Dec 2008
Location: Kent
Posts: 18
uk
Thanks: 3
Thanked 3 Times in 2 Posts
Rep Power: 3 Richbrown is on a distinguished road
Default Possible Conflikr virus ?

Hi. not used smooth wall so can't answer in detail i'm afraid but if you have alot of rouge traffic one explanation could be you have the conflikr virus on your lan ?

maybe worth checking.
  Reply With Quote
Old 27-11-2009, 10:14 AM   #3
 
mmoseley's Avatar
 
Join Date: Apr 2007
Posts: 224
uk
Thanks: 6
Thanked 11 Times in 5 Posts
Rep Power: 7 mmoseley will become famous soon enough
Default

Nah we have already dealt with conficker a couple of months ago!!!

Thank God! lol but was a veryyyyyy long week that week lol
  Reply With Quote
Old 27-11-2009, 10:43 AM   #4
 
tom_newton's Avatar
 
Join Date: Sep 2006
Location: Leeds
Posts: 1,958
uk uk yorkshire
Thanks: 171
Thanked 260 Times in 194 Posts
Rep Power: 59 tom_newton has much to be proud of tom_newton has much to be proud of tom_newton has much to be proud of tom_newton has much to be proud of tom_newton has much to be proud of tom_newton has much to be proud of tom_newton has much to be proud of tom_newton has much to be proud of tom_newton has much to be proud of tom_newton has much to be proud of
Default

Get the logs out - lets see which IP this is coming from, and where it is going to, and we will find out who/what is causing it! "-" is generally an unauthenticated IP (set their group to be unable to browse, perhaps - a bit of a band-aid solution)
  Reply With Quote
Old 27-11-2009, 02:47 PM   #5
 
rob_f's Avatar
 
Join Date: May 2008
Location: Leeds
Posts: 132
uk uk yorkshire
Thanks: 8
Thanked 33 Times in 25 Posts
Rep Power: 9 rob_f has a spectacular aura about rob_f has a spectacular aura about
Default

"-" can also be traffic to a site that you have not required to use authentication (Guardian > Authentication > Settings) as it doesn't ask/check who the request is from, hence the username for the request is "-".

EDIT: The various IP based reports (Information > Reports > Reports then Users > IP Sections) should give you top bandwidth by IP address IIRC.
  Reply With Quote
Thanks to rob_f from:
tom_newton (27-11-2009)
Old 28-11-2009, 07:22 PM   #6
 
mmoseley's Avatar
 
Join Date: Apr 2007
Posts: 224
uk
Thanks: 6
Thanked 11 Times in 5 Posts
Rep Power: 7 mmoseley will become famous soon enough
Default

Hiya chaps, an update...

After a chat with Tim at smoothwall support (very very good chap, helped us a few times!)

it turned out that Adobe Updater was causing the issue, it was downloading a bit of a file and then stopping because it didnt get a reply after so long,

so it would try again and this explained our constant 200kbps! but this is now sorted and fine!!

Thanks to everyone at smoothwall!!!

Mart
  Reply With Quote
Thanks to mmoseley from:
tom_newton (28-11-2009)
Old 29-11-2009, 12:25 PM   #7
 
Sylv3r's Avatar
 
Join Date: Jul 2005
Location: Co. Durham
Posts: 2,062
uk uk durham city
Thanks: 202
Thanked 177 Times in 152 Posts
Rep Power: 44 Sylv3r is a splendid one to behold Sylv3r is a splendid one to behold Sylv3r is a splendid one to behold Sylv3r is a splendid one to behold Sylv3r is a splendid one to behold Sylv3r is a splendid one to behold Sylv3r is a splendid one to behold
Send a message via MSN to Sylv3r Send a message via Skype™ to Sylv3r
Default

Quote:
Originally Posted by mmoseley View Post
Hiya chaps, an update...

After a chat with Tim at smoothwall support (very very good chap, helped us a few times!)

it turned out that Adobe Updater was causing the issue, it was downloading a bit of a file and then stopping because it didnt get a reply after so long,

so it would try again and this explained our constant 200kbps! but this is now sorted and fine!!

Thanks to everyone at smoothwall!!!

Mart
We had / have the exact same issue here with our smoothwall box with a rogue adobe update installer, can't remember how we fixed it to be honest but it was probably via help by smoothwall support.
  Reply With Quote
Reply

EduGeek.net Forums > Technical > Internet Related/Filtering/Firewall

Similar Threads
Thread Thread Starter Forum Replies Last Post
Smoothwall database problem theeldergeek Internet Related/Filtering/Firewall 5 26-11-2009 06:00 PM
Smoothwall UTM Problem mmoseley Internet Related/Filtering/Firewall 5 04-07-2009 10:20 AM
SmoothWall regular expression problem sjatkn Internet Related/Filtering/Firewall 1 24-06-2009 09:30 PM



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search Thread
Search Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 08:12 PM.
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2 ©2009, Crawlability, Inc.
Copyright EduGeek.net




website uptime

© 2005 - 2009 EduGeek.net
SERVER: 4
no new posts