Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Closed Forums (read only) > ASG V7.200 BETA (closed)

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 05-23-2008, 04:03 AM
Wizard
 
Join Date: Oct 2005
Posts: 2,430
Default Apparent issue with AFC and DNS

My test 7.200 system (running 7.193) is a small unit I use at home, connected to a DSL line using PPOE. The DNS configuration on the Astaro is simple, using the ISP's DNS servers as forwarders. I've been experiencing random loss of connectivity for the past week or so, and I finally decided to track down the problem... it appears that AFC is falsely detecting the Astaro's own DNS proxy / server as a generator of undesired P2P or IM traffic (I have everything set to block, and there are NO IM or P2P programs installed on the internal network whatsoever). It's kind of hard to tell what it's classifying the traffic as from the log... I've attached it for your perusal. I replaced my external ip with "my.internet.ip.address" for security / privacy reasons. This has been happening for quite a while, but I just haven't been using the home test system much lately (business has been good)... I think it's been happening since the first beta. Things eventually, after a minute or so, return to normal... it doesn't seem to happen for any particular site lookup, this one was triggered by an attempt to download a new ISO image from Microsoft for an Open License version of some software a customer just purchased. The site quit working halfway through, then I noticed this activity in the AFC log.
Attached Files
File Type: zip falsedetections.zip (887 Bytes, 5 views)
__________________
Convergent Information Security Solutions, LLC
Astaro Preferred Solution Partner
  #2 (permalink)  
Old 05-23-2008, 12:11 PM
Gert Hansen's Avatar
Wizard
 
Join Date: Nov 2000
Location: Karlsruhe, Germany
Posts: 1,242
Default

Hi Brucek,

thanks for the detailed report. I forwarded the request to one of our engineers, who will take a look at it.

regards
Gert
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 01:25 PM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.