Old 07-30-2010, 11:08 AM   #11 (permalink)
Untangler
 
Join Date: Nov 2008
URLs submitted: 1
Posts: 83
wtangle is on a distinguished road
Default

No racks, except for the default rack.
Let's see what .122 has going. Thanks.
wtangle is offline  
Old 07-30-2010, 11:16 AM   #12 (permalink)
Untangler
 
Join Date: Nov 2008
URLs submitted: 1
Posts: 83
wtangle is on a distinguished road
Default

When I run a connection test on google.com telnet to port 80, I get the following:

Fri Jul 30 2010 12:13:25 GMT-0500 (Central Daylight Time)
Fri Jul 30 12:13:24 CDT 2010 - Test Successful!
DNS fwd/rev mismatch: google.com != iw-in-f104.1e100.net
DNS fwd/rev mismatch: google.com != iw-in-f106.1e100.net
DNS fwd/rev mismatch: google.com != iw-in-f105.1e100.net
DNS fwd/rev mismatch: google.com != iw-in-f147.1e100.net
DNS fwd/rev mismatch: google.com != iw-in-f99.1e100.net
DNS fwd/rev mismatch: google.com != iw-in-f103.1e100.net
google.com [74.125.95.104] 80 (www) open

Is this normal? I am connecting to the internet just fine during this test.

Last edited by wtangle; 07-30-2010 at 11:18 AM..
wtangle is offline  
Old 07-30-2010, 11:38 AM   #13 (permalink)
Untangle Ninja
 
sky-knight's Avatar
 
Join Date: Apr 2008
Location: Phoenix, AZ
URLs submitted: 8
Posts: 14,698
sky-knight is on a distinguished road
Default

What the... no that isn't normal. And it looks to me like your DNS has been hijacked...
__________________
Rob Sandling, BS:SWE, MCP
Intouch Technology
Phone: 480-272-9889
rob@intouchtechllc.com

UntangleAppliances.com
Phone: 866-794-8879
sky-knight is offline  
Old 07-30-2010, 11:44 AM   #14 (permalink)
Untangle Junkie
 
dmorris's Avatar
 
Join Date: Nov 2006
Location: San Mateo, CA
URLs submitted: 10
Posts: 10,214
dmorris is on a distinguished road
Default

thats normal - here is my output:

Fri Jul 30 2010 10:42:14 GMT-0700 (PST)
Fri Jul 30 10:43:40 PDT 2010 - Test Successful!
DNS fwd/rev mismatch: google.com != nuq04s01-in-f147.1e100.net
DNS fwd/rev mismatch: google.com != nuq04s01-in-f99.1e100.net
DNS fwd/rev mismatch: google.com != nuq04s01-in-f103.1e100.net
DNS fwd/rev mismatch: google.com != nuq04s01-in-f104.1e100.net
google.com [74.125.19.147] 80 (www) open


can you telnet to google.com port 80 from inside the network?
__________________
Attention: Support and help on the Untangle Forums is provided by
volunteers and community members like yourself.
If you need Untangle support please call or email support@untangle.com
dmorris is offline  
Old 07-30-2010, 11:48 AM   #15 (permalink)
Untangler
 
Join Date: Nov 2008
URLs submitted: 1
Posts: 83
wtangle is on a distinguished road
Default

I am able to telnet to google.com port 80. Here is the message I get after the connection disconnect by itself:

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
Connection: close
Content-Type: text/html
ACCEPT-RANGES: none

<html><body><h1>408 Request Time-out</h1>
Your browser didn't send a complete req
uest in time.
</body></html>


Connection to host lost.
wtangle is offline  
Old 07-30-2010, 11:51 AM   #16 (permalink)
Untangle Junkie
 
dmorris's Avatar
 
Join Date: Nov 2006
Location: San Mateo, CA
URLs submitted: 10
Posts: 10,214
dmorris is on a distinguished road
Default

you can connect via telnet but you can't open google.com in a browser?
__________________
Attention: Support and help on the Untangle Forums is provided by
volunteers and community members like yourself.
If you need Untangle support please call or email support@untangle.com
dmorris is offline  
Old 07-30-2010, 11:56 AM   #17 (permalink)
Untangle Ninja
 
sky-knight's Avatar
 
Join Date: Apr 2008
Location: Phoenix, AZ
URLs submitted: 8
Posts: 14,698
sky-knight is on a distinguished road
Default

Dirk, this is acting like my unit...

It randomly loses the ability to setup a TCP session for HTTP only and only does so for about 30 seconds. But in my case my box is overloading CPU because of a pile of spam landing on my door thanks to this stupidly fast DOCSIS 3.0 connection.

With no mail server on site, either we have a large service that is over loading the box. Or, more likely, that high reputation workstation has a torrent hound on it burning up TCP sessions.

I can't think of anything else that can be causing this.
__________________
Rob Sandling, BS:SWE, MCP
Intouch Technology
Phone: 480-272-9889
rob@intouchtechllc.com

UntangleAppliances.com
Phone: 866-794-8879
sky-knight is offline  
Old 07-30-2010, 12:06 PM   #18 (permalink)
Untangler
 
Join Date: Nov 2008
URLs submitted: 1
Posts: 83
wtangle is on a distinguished road
Default

Sorry, I forgot to mention that when I did the telnet connection test, I still was able to access any website from the browser. I have just never tried to do the telnet test when I lost browsing capability in the past (yesterday was most recent from my computer).

Another thing is that when this happens (cannot access google.com either from browser during this time), other computers on the same network are still able to surf the Internet just fine. This issue is very random, and at times end users don't call me, they opt to restart the computer and go on with their work.
wtangle is offline  
Old 07-30-2010, 12:11 PM   #19 (permalink)
Untangle Ninja
 
sky-knight's Avatar
 
Join Date: Apr 2008
Location: Phoenix, AZ
URLs submitted: 8
Posts: 14,698
sky-knight is on a distinguished road
Default

Clean that box and see if the problem goes away. One good torrent hound can do this by itself.
__________________
Rob Sandling, BS:SWE, MCP
Intouch Technology
Phone: 480-272-9889
rob@intouchtechllc.com

UntangleAppliances.com
Phone: 866-794-8879
sky-knight is offline  
Old 07-30-2010, 12:51 PM   #20 (permalink)
Untangle Junkie
 
dmorris's Avatar
 
Join Date: Nov 2006
Location: San Mateo, CA
URLs submitted: 10
Posts: 10,214
dmorris is on a distinguished road
Default

Quote:
Originally Posted by sky-knight View Post
Dirk, this is acting like my unit...

It randomly loses the ability to setup a TCP session for HTTP only and only does so for about 30 seconds. But in my case my box is overloading CPU because of a pile of spam landing on my door thanks to this stupidly fast DOCSIS 3.0 connection.

With no mail server on site, either we have a large service that is over loading the box. Or, more likely, that high reputation workstation has a torrent hound on it burning up TCP sessions.

I can't think of anything else that can be causing this.
whats the load like? how much memory does it have? you can try lowering the spam load limit - that will "smooth out" the big burst of email into more even and gradual flow.
__________________
Attention: Support and help on the Untangle Forums is provided by
volunteers and community members like yourself.
If you need Untangle support please call or email support@untangle.com
dmorris is offline  
Closed Thread

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 05:06 PM.


© 2010 Untangle, Inc. All Rights Reserved.   SEO by vBSEO 3.6.0