Slow Internet using 2.5.1

[Guest]

[pevans_om]

Hi

I'm quite disappointed with the upgrade to 2.5.1. I did a fresh install of 2.5.1 because the upgrade didn't work for me. Since installing this new version our Internet has been very slow. We use the proxy and content filter and I have the outgoing firewall set to block port 80 and 443, so that I can force the users to use the proxy when browsing. Response times when browsing are very slow though. If I disable the proxy the speed goes back to normal.

I have now reinstalled 2.4 and the browsing speeds are perfect (using exactly the same firewall and proxy rules.)

Does anyone have an explanation for this?

Paul

[pwinterf]

only that for other issues i also went back to 2.4.1

could be related, in that dns lookups seem to be  blocked by the firewall rules interzone.

adding rules to allow do not work, wether you use port forward or interzone rules, it wont let the

traffic through.

slow proxy could also be the proxy timing out on lookups.

just a guess really.

regards peter

[m.miegielsen]

Setting the following values in /etc/dansguardian/dansguardian.conf.tmpl:

Code:

maxchildren = 400
minchildren = 32
minsparechildren = 15
preforkchildren = 8
maxsparechildren = 64
maxagechildren = 4000

Source: bugs.endian.com/view.php?id=4350

[mrkroket]

No, you must replace /etc/dansguardian/dansguardian.conf.tmpl template file.
 The /etc/dansguardian/dansguardian.conf file is always rewritten so any changes are deleted.

[cmateski]

Could someone please confirm if this fixed the problem.

[speccompsol]

Reference this bug report:  http://bugs.endian.com/view.php?id=4350

With this fix . . . .

nano /usr/lib/efw/dansguardian/default/settings
change the values as below:

MAXCHILDREN=500
MINCHILDREN=128
MINSPARECHILDREN=32
PREFORKCHILDREN=16
MAXSPARECHILDREN=256
MAXAGECHILDREN=10000


Also if you are facing slow browsing issue change the following values:

nano /var/efw/havp/settings

change 2 values as below

MAXSERVERS=150
SERVERNUMBER=50


I have a efw box running 200 users through a 50mbit fiber connection with the above settings modified.

[turrican]

Seems to be resolved with this configuration trick.

Thanks!