Strange HTTP Proxy issue both 2.2rc2 and 2.2 28 May 09 release

[McJerry]

I've had efw 2.2rc2 running since its release and until today have had NO problems.  I have it configured with multiple uplinks on red, green+blue+orange.  Today, with 2.2rc2 running, client browsing became extremely slow and at times would time out.  I tried disabling uplinks one at a time to rule out the possibility they were having issues.  Finally I disabled the HTTP proxy and clients started browsing as normal.  There has been NO changes to the configuration in many months.  Enabling the HTTP proxy again caused problems.

I swapped the box and performed a fresh install of the current 2.2 release.  After manually configuring to match the other box and restarting all modems and the efw box, I was browsing fine until I enabled the HTTP proxy.

What could cause this strange problem?  What can I do to resolve the issue?

[compdoc]

Today I had a windows 2000/IE6 client having problems
opening their home page.

Their http proxy is set to run as transparent. I decided to
try changing the client's IE to use the proxy server by
entering its IP and using port 8080, and to bypass the proxy
for local addresses, and her home page came right up.

In the past on my own efw, I've had odd things happen - like
a flash window within a page not being able to load. The
rest of the page would load, but not one small section of
it. I turned off transparent, and used 'no authentication",
and set IE to use my efw directly. (Tools>Internet
Options>Connection tab>Lan settings button)

You might also run top to see if some process is using too
much cpu time...


------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

I've seen something similar on another firewall/security gateway than endian
using a transparent http proxy:

Some clients were asking for software updates (it was adobe reader, when I
remember right), on the proxy the update was scanned by havp/clamav for quite
a while and so the updater on the clients site thought, that the conection
timed out and tried to download again and again and again and...

This way all of the memory and all of cpu of the gateway was consumed and
other actions on the http proxy were extremely slow.

You might try to find out, if something similar is happening to you. Try using
top on the shell, try reading the proxy logs. And if you find something similar
then you could bypass the proxy for these targets.

Greetz,
Andy


------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

[Steven Sher]

I think I have seen the same problem on a box running Endian 2.2  running transparent proxy and seems to block google.co.za in certain instances for some reason, not always consistent.  I do not even have content filtering enabled.

Anybody know what the problem is?

Steve


-----Original Message-----
From: compdoc [mailto:compdoc@...]
Sent: 05 June 2009 02:32 AM
To: efw-user@...
Subject: Re: [Efw-user] Strange HTTP Proxy issue both 2.2rc2 and 2.2 28 May 09 release

Today I had a windows 2000/IE6 client having problems
opening their home page.

Their http proxy is set to run as transparent. I decided to
try changing the client's IE to use the proxy server by
entering its IP and using port 8080, and to bypass the proxy
for local addresses, and her home page came right up.

In the past on my own efw, I've had odd things happen - like
a flash window within a page not being able to load. The
rest of the page would load, but not one small section of
it. I turned off transparent, and used 'no authentication",
and set IE to use my efw directly. (Tools>Internet
Options>Connection tab>Lan settings button)

You might also run top to see if some process is using too
much cpu time...


------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user



------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Hi, did you clean you Squid cache after updating?
Cheers,
Pedro

On Friday 05 June 2009 01:09:35 McJerry wrote:

>
> I've had efw 2.2rc2 running since its release and until today have had NO
> problems.  I have it configured with multiple uplinks on red,
> green+blue+orange.  Today, with 2.2rc2 running, client browsing became
> extremely slow and at times would time out.  I tried disabling uplinks one
> at a time to rule out the possibility they were having issues.  Finally I
> disabled the HTTP proxy and clients started browsing as normal.  There has
> been NO changes to the configuration in many months.  Enabling the HTTP
> proxy again caused problems.
>
> I swapped the box and performed a fresh install of the current 2.2 release.
> After manually configuring to match the other box and restarting all modems
> and the efw box, I was browsing fine until I enabled the HTTP proxy.
>
> What could cause this strange problem?  What can I do to resolve the issue?

--
----------------------------------------------------------------------------------------------------------
Pedro M. S. Oliveira                            
IT Consultant                            
Email: pmsoliveira@...  
URL:   http://pedro.linux-geex.com               
Cellular: [phone]
----------------------------------------------------------------------------------------------------------

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user