Re: Flaky ADSL Connection/Disconnection Control

[email protected] (Kenneth Cronin) Sat, 16 Oct 2004 15:07:58 +0200
Newsgroups gmane.comp.security.firewalls.smoothwall.general
Message-ID <[email protected]>
Nagy, Laci L wrote:
> Update on this problem: 
> 
> "... I have a situation with a school running SW Express fix 4 over PPoE on a 1500/256 ADSL connection with a static IP that:
> 
> a.  Keeps losing connectivity in that users can't surf the net, but SW still reports as connected. 
> b.  When in this state, clicking on the Disconnect and Connect buttons has no effect, so that the only way to resolve is to reboot.
> 
> c.  Goes through periods of disconnection/reconnection, at worst it happened almost every hour (never the same length of time or time of day)..."
> 
> We seem to be having two different problems: 
> 
> This first one mentioned above, gives us PPP log files like this: 

> Now the second problem: 
> The second problem gives us this log: 
> 01:11:36 pppd No response to 3 echo-requests
> 01:11:36 pppd Serial link appears to be disconnected.
> 01:12:36 pppoe Inactivity timeout... something wicked happened on session 2849
> 01:12:36 pppoe Sent PADT
> 08:58:24 pppd pppd 2.4.1 started by nobody, uid 99
(snip]
> 
> I've not seen this before, can anyone shed some light on this problem and is it related to the first problem? 
> Any hints, tips, pointers or actual answers will be gratefully and graciously accepted. 
> I've also taken the liberty of posting this in the web forum to get the input from those who don't subscribe to the list, I apologise if you see this twice.
> 
> Regards, 
> Laci 


Hi Laci

Have you checked your traffic logs fro excesive upload and download 
traffic.  I had the same problem you mention above with LCP echo 
requests and it was being caused by file sharing pcs on my network (i.e. 
KaZaA, e-donkey etc.).  Due to the excessive amount of traffic being 
caused by these file sharing pc's my smoothwall wasn't recieving any 
replies to the LCP echo requests it was sending out in order to check 
that the connection was still up and running.

If this is the reason for your problem then there are couple of 
solutions available

1.) Increase lpc-echo-request interval to '30' and the 
lcp-echo-request-failure to '9' in /etc/ppp/ppp-on  and let your 
students contain to use e-donkey & co. (Which I wouldn't recommend)

2.) Try locate the pc's in question and remove the file sharing software 
and discipline the students responsible.

3.) Try and set up some IP-Table rules in order to block file sharing 
services.  Could prove tricky as if I remember correctly some service 
use random ports for connections.

Hope this helps
Ken
_______________________________________________
gpl mailing list
[email protected]
http://lists.smoothwall.org/mailman/listinfo/gpl

SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall