Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Web Security: HTTP/HTTPS/FTP, IM/P2P, Web Filtering and Antivirus

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #11 (permalink)  
Old 03-24-2009, 10:00 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

Trouble with a capital "T"
And that rhymes with "B" and that stands for bug!*

Cheers - Bob
* Sorry, but that line from "The Music Man" just seemed apropos.
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #12 (permalink)  
Old 03-25-2009, 08:59 AM
Senior Member
 
Join Date: Jul 2008
Location: Karlsruhe
Posts: 124
Default

There shouldn't be any difference whether you turn on single or double scan. A file gets downloaded completely to the asg, then scanned and then gets streamed to the client. If your file is larger than max scanning size (assuming your server understands the SIZE command), it will be streamed directly to the client without scanning.
Reply With Quote
  #13 (permalink)  
Old 03-25-2009, 11:40 AM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

But, frickler, if the virus-scan is off, why does the throughput get reduced from over 700kb/s to 320kbs? Why should the proxy be so inefficient?
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #14 (permalink)  
Old 03-25-2009, 12:34 PM
Senior Member
 
Join Date: Jul 2008
Location: Karlsruhe
Posts: 124
Default

Where did you get the information 320kbs? Is it the actual download-speed or is it an average (size divided by time)? If your proxy does virus scanning a download takes longer, because the proxy first downloads the file completely before sending it out to the client.
Reply With Quote
  #15 (permalink)  
Old 03-25-2009, 01:22 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,323
Default

Please read the first page of this thread. Wrallen did a great job of testing and documenting his problem. He disabled virus scanning in the ftp proxy and experienced what I repeated above.
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #16 (permalink)  
Old 03-25-2009, 03:08 PM
Junior Member
 
Join Date: Mar 2009
Posts: 8
Default

Here is the file that i was testing with. They have a enough bandwidth so that I can use all of mine.

ftp://ftp.uwsg.indiana.edu/linux/man...dvd-x86_64.iso

Anyone mind testing this also? It's too big for virus scanning so that doesn't matter. Start downloading it to see what speeds you can get with the ftp proxy on and off. You need to add ftp to the packet filter rules so that it will download with the proxy turned off. Just cancel the download after you determine your speeds.

I'm hoping it's not just me. Though I feel kinda mean saying that lol.
Reply With Quote
  #17 (permalink)  
Old 03-25-2009, 04:00 PM
Senior Member
 
Join Date: Jul 2008
Location: Karlsruhe
Posts: 124
Default

I'm sorry, i currently have no other idea of the cause.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 01:40 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.