EFW Support

Support => EFW SMTP, HTTP, SIP, FTP Proxy Support => Topic started by: rvmoerkerk on Friday 18 June 2010, 05:59:42 pm



Title: 2.4 slow internet after 1 day transparant proxy
Post by: rvmoerkerk on Friday 18 June 2010, 05:59:42 pm
Hi there,

I'm using endian for a  of years now with full use. a week ago we upgraded to endian 2.4. the upgrade process was great;

- the incoming mail domains where lost (easy to fill but as a notifaction to all of you)
- a reboot was needed to upgrade the kernel.

Now we are a week or 2 on our way i have a  of issues

- users behind our transparant proxy with snort enabled and filtering are experiancing slow internet after a   of ours (24 or so). After a reboot of endian everything works fine for some time. The cpu and memory are not extremely being used. What can we do to fix this or is this a known thing.


keep up the good work and please le me know if there is a sollution for the slow internet and google earth issue.

Robbie


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: maximus007 on Friday 02 July 2010, 04:22:05 pm
Having the same problem here. CPU usage and memory use are fine but the internet drops out at random intervals.


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: trungtv on Sunday 04 July 2010, 08:15:15 pm
try to clear cache


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: eisveldt on Tuesday 06 July 2010, 12:20:05 am
Maybe i am experience the same issue here. I am not sure if it was the internet connection or the EFW, but we restarted the modem and it seems to work.
Someone can test from localy :-) to shut/ no shut on the red interface when this slow or no internet connection accure?
I reply if it happends again.
Best regards Jimmy


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: odimenokyo on Tuesday 17 August 2010, 04:58:34 pm
I noticed this problem too, I had a doubt but after several tests, after a few days to a week, I have performance losses at the time of loading Web pages. After a reboot everything returns to normal ... but only for a few days.


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: eighty2scrambler on Friday 27 August 2010, 12:47:32 am
We upgraded from 2.2 to 2.4 using a clean boot, then did a restore of settings from a backup.  I am experiencing the same issues as stated above.  Webpages will load half way, and you have to constantly refresh browser to get the connection to finish loading the page. 

If anyone has options to try, please let us know.  We've done the basics, clear cache, reboot server/modems.  still experiencing slow connections



Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: cjohnson on Monday 30 August 2010, 08:27:20 am
Same problem as everyone above. Slow load times on almost all sites after upgrade to 2.4. I do not have the luxury of restarting the firewall only the ability to clear the cache and this doesn't seem to solve the problem. Sometimes when I click on the "Clear Cache" button I get notifications on the screen saying "Reloading Squid" and "Clearing Cache." This only happens 1 out of every 4 or so times I click the button. Is this normal behavior or a bug? Also, does anyone have a recommendation on cache size? I have mine set at default. ( 50 megs )


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: mrkroket on Thursday 02 September 2010, 05:39:42 am
It only happens  with upgraded EFW 2.2?
Someone has this problem on a fresh installed EFW 2.4?

Logs says something weird?


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: odimenokyo on Tuesday 07 September 2010, 03:57:54 am
Yes on fresh install in 2.4 the problem is the same....


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: mrkroket on Tuesday 07 September 2010, 06:43:17 am
Please write here your last logs:
tail -n 60 /var/log/messages
your log errors
cat /var/log/messages | grep -i error
your squid log messages:
cat /var/log/squid/squid.out

To see any error.


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: rvmoerkerk on Monday 27 September 2010, 08:11:07 pm
Hi,

I tried to upload the logs. However i cannot find any. there are no errors and there is no /var/log/squid/squid.out

Is this a couse of the problems?


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: vncybernet on Wednesday 06 October 2010, 08:33:30 pm
Hi, sory about my english not well.

I confirm this problem, when i use transparent proxy for a week, problem start, time for loading a webpage too slow (about 20s). Next, i'm test with bypass http proxy for my local subnet (or IP), it going to normal. I think problem here is DNS response time and Squid, emty for /var/log/squid/squid.out,
tail -n 60 /var/log/messages:
Code:
root@Firewall:~ # tail -n 60 /var/log/messages
Oct  6 16:26:21 Firewall p3scan[7654]: Real-server address is 210.245.87.22:110
Oct  6 16:26:21 Firewall p3scan[7654]: USER '(null)'
Oct  6 16:26:21 Firewall p3scan[7654]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:26:34 Firewall p3scan[7663]: POP3 Connection from 192.168.170.55:4530
Oct  6 16:26:34 Firewall p3scan[7663]: Real-server address is 210.245.87.22:110
Oct  6 16:26:34 Firewall p3scan[7663]: USER 'Dealer20@thuylinh.com.vn'
Oct  6 16:26:34 Firewall p3scan[7663]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:26:38 Firewall p3scan[7664]: POP3 Connection from 192.168.170.45:48515
Oct  6 16:26:38 Firewall p3scan[7664]: Real-server address is 210.245.87.22:110
Oct  6 16:26:38 Firewall p3scan[7664]: USER '(null)'
Oct  6 16:26:39 Firewall p3scan[7664]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:26:41 Firewall p3scan[7666]: POP3 Connection from 192.168.170.47:2296
Oct  6 16:26:41 Firewall p3scan[7666]: Real-server address is 210.245.87.22:110
Oct  6 16:26:41 Firewall p3scan[7666]: USER 'dealer03@thuylinh.com.vn'
Oct  6 16:26:41 Firewall p3scan[7666]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:26:53 Firewall p3scan[7669]: POP3 Connection from 192.168.170.56:50115
Oct  6 16:26:53 Firewall p3scan[7669]: Real-server address is 210.245.87.22:110
Oct  6 16:26:53 Firewall p3scan[7669]: USER 'dealer29@thuylinh.com.vn'
Oct  6 16:26:53 Firewall p3scan[7669]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:00 Firewall sshd[7670]: Accepted password for root from ::ffff:192.168.170.253 port 41090 ssh2
Oct  6 16:27:00 Firewall sshd(pam_unix)[7670]: session opened for user root by (uid=0)
Oct  6 16:27:01 Firewall mailfile[7678]: Mail sent to 'network@thuylinh.com.vn'. Mail caller: 'EFW-20200018'
Oct  6 16:27:16 Firewall p3scan[7703]: POP3 Connection from 192.168.170.44:57386
Oct  6 16:27:16 Firewall p3scan[7703]: Real-server address is 210.245.87.22:110
Oct  6 16:27:17 Firewall p3scan[7703]: USER '(null)'
Oct  6 16:27:17 Firewall p3scan[7703]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:20 Firewall p3scan[7707]: POP3 Connection from 192.168.170.53:62005
Oct  6 16:27:20 Firewall p3scan[7707]: Real-server address is 210.245.87.22:110
Oct  6 16:27:20 Firewall p3scan[7707]: USER 'dealer18@thuylinh.com.vn'
Oct  6 16:27:20 Firewall p3scan[7707]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:21 Firewall p3scan[7708]: POP3 Connection from 192.168.170.58:41571
Oct  6 16:27:21 Firewall p3scan[7708]: Real-server address is 210.245.87.22:110
Oct  6 16:27:21 Firewall p3scan[7708]: USER '(null)'
Oct  6 16:27:21 Firewall p3scan[7708]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:34 Firewall p3scan[7710]: POP3 Connection from 192.168.170.55:4539
Oct  6 16:27:34 Firewall p3scan[7710]: Real-server address is 210.245.87.22:110
Oct  6 16:27:34 Firewall p3scan[7710]: USER 'Dealer20@thuylinh.com.vn'
Oct  6 16:27:34 Firewall p3scan[7710]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:38 Firewall p3scan[7712]: POP3 Connection from 192.168.170.45:48516
Oct  6 16:27:38 Firewall p3scan[7712]: Real-server address is 210.245.87.22:110
Oct  6 16:27:38 Firewall p3scan[7712]: USER '(null)'
Oct  6 16:27:39 Firewall p3scan[7712]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:41 Firewall p3scan[7713]: POP3 Connection from 192.168.170.47:2299
Oct  6 16:27:41 Firewall p3scan[7713]: Real-server address is 210.245.87.22:110
Oct  6 16:27:41 Firewall p3scan[7713]: USER 'dealer03@thuylinh.com.vn'
Oct  6 16:27:43 Firewall p3scan[7713]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:27:53 Firewall p3scan[7716]: POP3 Connection from 192.168.170.56:50117
Oct  6 16:27:53 Firewall p3scan[7716]: Real-server address is 210.245.87.22:110
Oct  6 16:27:53 Firewall p3scan[7716]: USER 'dealer29@thuylinh.com.vn'
Oct  6 16:27:54 Firewall p3scan[7716]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:28:16 Firewall p3scan[7734]: POP3 Connection from 192.168.170.44:57387
Oct  6 16:28:16 Firewall p3scan[7734]: Real-server address is 210.245.87.22:110
Oct  6 16:28:17 Firewall p3scan[7734]: USER '(null)'
Oct  6 16:28:17 Firewall p3scan[7734]: Session done (Clean Exit). Mails: 0 Bytes: 0
Oct  6 16:28:20 Firewall p3scan[7735]: POP3 Connection from 192.168.170.53:62011
Oct  6 16:28:20 Firewall p3scan[7735]: Real-server address is 210.245.87.22:110
Oct  6 16:28:21 Firewall p3scan[7738]: POP3 Connection from 192.168.170.58:59659
Oct  6 16:28:21 Firewall p3scan[7738]: Real-server address is 210.245.87.22:110
Oct  6 16:28:21 Firewall p3scan[7738]: USER '(null)'
Oct  6 16:28:21 Firewall p3scan[7738]: Session done (Clean Exit). Mails: 0 Bytes: 0

cat /var/log/messages | grep -i error
= nothing

and don't know how to resolve. Hope for answer!


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: sindrom on Monday 11 October 2010, 10:23:41 pm
The same problem: EFW 2.4 clear install, after 2 days of work internet connection is slow....squid.out is empty...
Also noticed, that the owner of squid.out is root:root (644) is that ok?


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: sindrom on Tuesday 12 October 2010, 12:55:10 am
I find out that if you use non EFW dns in client side - the problem disappears...so, that might be the problem. Please somebody try to do the same and post here, if it helps


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: vncybernet on Wednesday 13 October 2010, 03:47:04 pm
Means as you change the DNS settings in the client by the ISP's DNS?


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: sindrom on Wednesday 13 October 2010, 04:45:08 pm
Yes, i changed DNS settings at client side from local (192.168.x.x - endian IP) to provider DNS. Also I added 53 port to Proxy -> Config -> Allowed Ports (from client) and set DNS to local again....bu not sure if it helps...testing now


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: sindrom on Tuesday 19 October 2010, 07:57:02 pm
Did anybody succeded in that problem?


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: matcam on Wednesday 27 October 2010, 06:14:26 pm
Same problem


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: TheEricHarris on Saturday 04 December 2010, 04:50:28 pm
Having same issue with 2.4.1.  Also had same issue on 2.2. 

Internet pages can take 5-10 secodns to load at times.  Just hangs for a bit then loads.



Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: imekul on Saturday 16 February 2013, 11:24:14 am
I'm seeing this type of problem with the transparent proxy and web filter enabled on 2.5.1.  If I disable the proxy, all works fine, but if it's on pages will sometimes take a long time to load or even not load altogether.

Has anybody found a solution?


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: sree on Friday 10 May 2013, 11:27:53 pm
Check the CPU Usage by TOP .

HAVP will be taking all resources and making your inter net slow.


Title: Re: 2.4 slow internet after 1 day transparant proxy
Post by: Fgalvan on Thursday 03 October 2013, 02:36:57 am
Had this happen to me after in-place upgrade from 2.5.1 to 2.5.2

Resolved it by adding my internal DNS servers to /etc/resolv.conf
Apparently the upgrade removes them

Hope this helps