SmoothWall Constant Outgoing problem

[mmoseley]

Morning All!

Sorry about the vague title! it was hard to describe in a short blurb what i was talking about!

Over the past few days we've been experiencing a HIGH level of output to the internet from the smoothwall, on the main page the little graph shows a constant 200kbps! so look at the traffic logs...nothing of any concern showing there...

Checked the reports on the bandwidth by user and it shows "-" which i had banned over a previous problem anyway (so should that show up???)....and it also shows a huge chunk being taken up by "others" but i dont know what "others" means..!

Anybody got any ideas?

Ta very much! and have a great weekend guys...i can feel a few beers happening this weekend!! lol

Mart

[Richbrown]

Hi. not used smooth wall so can't answer in detail i'm afraid but if you have alot of rouge traffic one explanation could be you have the conflikr virus on your lan ?

maybe worth checking.

[mmoseley]

Nah we have already dealt with conficker a couple of months ago!!!

Thank God! lol but was a veryyyyyy long week that week lol

[tom_newton]

Get the logs out - lets see which IP this is coming from, and where it is going to, and we will find out who/what is causing it! "-" is generally an unauthenticated IP (set their group to be unable to browse, perhaps - a bit of a band-aid solution)

[rob_f]

"-" can also be traffic to a site that you have not required to use authentication (Guardian > Authentication > Settings) as it doesn't ask/check who the request is from, hence the username for the request is "-".

EDIT: The various IP based reports (Information > Reports > Reports then Users > IP Sections) should give you top bandwidth by IP address IIRC.

[mmoseley]

Hiya chaps, an update...

After a chat with Tim at smoothwall support (very very good chap, helped us a few times!)

it turned out that Adobe Updater was causing the issue, it was downloading a bit of a file and then stopping because it didnt get a reply after so long,

so it would try again and this explained our constant 200kbps! but this is now sorted and fine!!

Thanks to everyone at smoothwall!!!

Mart

[Sylv3r]

Hiya chaps, an update...

After a chat with Tim at smoothwall support (very very good chap, helped us a few times!)

it turned out that Adobe Updater was causing the issue, it was downloading a bit of a file and then stopping because it didnt get a reply after so long,

so it would try again and this explained our constant 200kbps! but this is now sorted and fine!!

Thanks to everyone at smoothwall!!!

Mart

We had / have the exact same issue here with our smoothwall box with a rogue adobe update installer, can't remember how we fixed it to be honest but it was probably via help by smoothwall support.