2.4 slow internet after 1 day transparant proxy

[Guest]

[rvmoerkerk]

Hi there,

I'm using endian for a  of years now with full use. a week ago we upgraded to endian 2.4. the upgrade process was great;

- the incoming mail domains where lost (easy to fill but as a notifaction to all of you)
- a reboot was needed to upgrade the kernel.

Now we are a week or 2 on our way i have a  of issues

- users behind our transparant proxy with snort enabled and filtering are experiancing slow internet after a   of ours (24 or so). After a reboot of endian everything works fine for some time. The cpu and memory are not extremely being used. What can we do to fix this or is this a known thing.


keep up the good work and please le me know if there is a sollution for the slow internet and google earth issue.

Robbie

[maximus007]

Having the same problem here. CPU usage and memory use are fine but the internet drops out at random intervals.

[trungtv]

try to clear cache

[eisveldt]

Maybe i am experience the same issue here. I am not sure if it was the internet connection or the EFW, but we restarted the modem and it seems to work.
Someone can test from localy :-) to shut/ no shut on the red interface when this slow or no internet connection accure?
I reply if it happends again.
Best regards Jimmy

[odimenokyo]

I noticed this problem too, I had a doubt but after several tests, after a few days to a week, I have performance losses at the time of loading Web pages. After a reboot everything returns to normal ... but only for a few days.

[eighty2scrambler]

We upgraded from 2.2 to 2.4 using a clean boot, then did a restore of settings from a backup.  I am experiencing the same issues as stated above.  Webpages will load half way, and you have to constantly refresh browser to get the connection to finish loading the page. 

If anyone has options to try, please let us know.  We've done the basics, clear cache, reboot server/modems.  still experiencing slow connections

[cjohnson]

Same problem as everyone above. Slow load times on almost all sites after upgrade to 2.4. I do not have the luxury of restarting the firewall only the ability to clear the cache and this doesn't seem to solve the problem. Sometimes when I click on the "Clear Cache" button I get notifications on the screen saying "Reloading Squid" and "Clearing Cache." This only happens 1 out of every 4 or so times I click the button. Is this normal behavior or a bug? Also, does anyone have a recommendation on cache size? I have mine set at default. ( 50 megs )

[mrkroket]

It only happens  with upgraded EFW 2.2?
Someone has this problem on a fresh installed EFW 2.4?

Logs says something weird?

[odimenokyo]

Yes on fresh install in 2.4 the problem is the same....

[mrkroket]

Please write here your last logs:
tail -n 60 /var/log/messages
your log errors
cat /var/log/messages | grep -i error
your squid log messages:
cat /var/log/squid/squid.out

To see any error.

[rvmoerkerk]

Hi,

I tried to upload the logs. However i cannot find any. there are no errors and there is no /var/log/squid/squid.out

Is this a couse of the problems?

[vncybernet]

Hi, sory about my english not well.

I confirm this problem, when i use transparent proxy for a week, problem start, time for loading a webpage too slow (about 20s). Next, i'm test with bypass http proxy for my local subnet (or IP), it going to normal. I think problem here is DNS response time and Squid, emty for /var/log/squid/squid.out,
tail -n 60 /var/log/messages:

Code:

root@Firewall:~ # tail -n 60 /var/log/messages
Oct  6 16:26:21 Firewall p3scan[7654]: Real-server address is 210.245.87.22:110
Oct  6 16:26:21 Firewall p3scan[7654]: USER '(null)'
Oct  6 16:26:21 Firewall p3scan[7654]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:26:34 Firewall p3scan[7663]: POP3 Connection from 192.168.170.55:4530
Oct  6 16:26:34 Firewall p3scan[7663]: Real-server address is 210.245.87.22:110
Oct  6 16:26:34 Firewall p3scan[7663]: USER 'Dealer20@thuylinh.com.vn'
Oct  6 16:26:34 Firewall p3scan[7663]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:26:38 Firewall p3scan[7664]: POP3 Connection from 192.168.170.45:48515
Oct  6 16:26:38 Firewall p3scan[7664]: Real-server address is 210.245.87.22:110
Oct  6 16:26:38 Firewall p3scan[7664]: USER '(null)'
Oct  6 16:26:39 Firewall p3scan[7664]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:26:41 Firewall p3scan[7666]: POP3 Connection from 192.168.170.47:2296
Oct  6 16:26:41 Firewall p3scan[7666]: Real-server address is 210.245.87.22:110
Oct  6 16:26:41 Firewall p3scan[7666]: USER 'dealer03@thuylinh.com.vn'
Oct  6 16:26:41 Firewall p3scan[7666]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:26:53 Firewall p3scan[7669]: POP3 Connection from 192.168.170.56:50115
Oct  6 16:26:53 Firewall p3scan[7669]: Real-server address is 210.245.87.22:110
Oct  6 16:26:53 Firewall p3scan[7669]: USER 'dealer29@thuylinh.com.vn'
Oct  6 16:26:53 Firewall p3scan[7669]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:00 Firewall sshd[7670]: Accepted password for root from ::ffff:192.168.170.253 port 41090 ssh2
Oct  6 16:27:00 Firewall sshd(pam_unix)[7670]: session opened for user root by (uid=0)
Oct  6 16:27:01 Firewall mailfile[7678]: Mail sent to 'network@thuylinh.com.vn'. Mail caller: 'EFW-20200018'
Oct  6 16:27:16 Firewall p3scan[7703]: POP3 Connection from 192.168.170.44:57386
Oct  6 16:27:16 Firewall p3scan[7703]: Real-server address is 210.245.87.22:110
Oct  6 16:27:17 Firewall p3scan[7703]: USER '(null)'
Oct  6 16:27:17 Firewall p3scan[7703]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:20 Firewall p3scan[7707]: POP3 Connection from 192.168.170.53:62005
Oct  6 16:27:20 Firewall p3scan[7707]: Real-server address is 210.245.87.22:110
Oct  6 16:27:20 Firewall p3scan[7707]: USER 'dealer18@thuylinh.com.vn'
Oct  6 16:27:20 Firewall p3scan[7707]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:21 Firewall p3scan[7708]: POP3 Connection from 192.168.170.58:41571
Oct  6 16:27:21 Firewall p3scan[7708]: Real-server address is 210.245.87.22:110
Oct  6 16:27:21 Firewall p3scan[7708]: USER '(null)'
Oct  6 16:27:21 Firewall p3scan[7708]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:34 Firewall p3scan[7710]: POP3 Connection from 192.168.170.55:4539
Oct  6 16:27:34 Firewall p3scan[7710]: Real-server address is 210.245.87.22:110
Oct  6 16:27:34 Firewall p3scan[7710]: USER 'Dealer20@thuylinh.com.vn'
Oct  6 16:27:34 Firewall p3scan[7710]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:38 Firewall p3scan[7712]: POP3 Connection from 192.168.170.45:48516
Oct  6 16:27:38 Firewall p3scan[7712]: Real-server address is 210.245.87.22:110
Oct  6 16:27:38 Firewall p3scan[7712]: USER '(null)'
Oct  6 16:27:39 Firewall p3scan[7712]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:41 Firewall p3scan[7713]: POP3 Connection from 192.168.170.47:2299
Oct  6 16:27:41 Firewall p3scan[7713]: Real-server address is 210.245.87.22:110
Oct  6 16:27:41 Firewall p3scan[7713]: USER 'dealer03@thuylinh.com.vn'
Oct  6 16:27:43 Firewall p3scan[7713]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:53 Firewall p3scan[7716]: POP3 Connection from 192.168.170.56:50117
Oct  6 16:27:53 Firewall p3scan[7716]: Real-server address is 210.245.87.22:110
Oct  6 16:27:53 Firewall p3scan[7716]: USER 'dealer29@thuylinh.com.vn'
Oct  6 16:27:54 Firewall p3scan[7716]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:28:16 Firewall p3scan[7734]: POP3 Connection from 192.168.170.44:57387
Oct  6 16:28:16 Firewall p3scan[7734]: Real-server address is 210.245.87.22:110
Oct  6 16:28:17 Firewall p3scan[7734]: USER '(null)'
Oct  6 16:28:17 Firewall p3scan[7734]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:28:20 Firewall p3scan[7735]: POP3 Connection from 192.168.170.53:62011
Oct  6 16:28:20 Firewall p3scan[7735]: Real-server address is 210.245.87.22:110
Oct  6 16:28:21 Firewall p3scan[7738]: POP3 Connection from 192.168.170.58:59659
Oct  6 16:28:21 Firewall p3scan[7738]: Real-server address is 210.245.87.22:110
Oct  6 16:28:21 Firewall p3scan[7738]: USER '(null)'
Oct  6 16:28:21 Firewall p3scan[7738]: Session done (Clean Exit). Mails: 0 Bytes: 0

cat /var/log/messages | grep -i error = nothing

and don't know how to resolve. Hope for answer!

[sindrom]

The same problem: EFW 2.4 clear install, after 2 days of work internet connection is slow....squid.out is empty...
Also noticed, that the owner of squid.out is root:root (644) is that ok?

[sindrom]

I find out that if you use non EFW dns in client side - the problem disappears...so, that might be the problem. Please somebody try to do the same and post here, if it helps

[vncybernet]

Means as you change the DNS settings in the client by the ISP's DNS?