On Fri, Jul 12, 2002 at 03:24:12PM +0200, Brandon Friedman <[EMAIL PROTECTED]> 
wrote:
> [...]
> However we have spoken to other people, they say they disable browse 
> master election in the file&print sharing option and the problem 
> improves alot.

That traffic still shouldn't need to go external. I'd like to see 
the evidence/logs that this changes things.

> Also as far as I know windows does DNS queries from port 137-139 
> (netbios-ns,netbios-ssn and netbios-dgm) - I think I will test these and 
> see what happens when I block.

Yep - I agree they shouldn't trigger the link.

> To be honest Gordon, I do agree it isn't an SME problem - diald is just 
> too sensitive. I think with stricter rules, we should be able to control 
> this.

Absolutely.

> We tested last night on one site where all networked PC were off and SME 
> behaved itself, as soon as we brought PC up - problem started again!

As would be expected. Now you need to see _what_ is bringing up the link.

> Alternatively we can look at the work done by Stephen noble, where one 
> would force the link up as required (ie via a web page) but scheduled 
> mail retrieval is still allow to go through.

Again - as I suggested. There is no one solution - you need to work
out what is best for you.

> BTW How does fetrchmail trigger diald?

/etc/startmail is called from cron, and diald brings the link up
on pop/smtp packets.

> Also I notice that SME uses diald 0.9.... and the latest version 
> available is 1.0.1 - has anybody tried upgrading? I believe there are 
> quite a few bug fixes in the latest version. I have download the src rpm 
> and we rebuild it later today.

Upgrading is usually a good idea, but we still haven't seen any evidence
of bugs in diald. The issue is diald configuration for your situation
and recompiling diald isn't likely to change that.

> [...diald filter project...]
> hmmmm I'm game.....anyone-else?

I'm certainly interested in helping on this one. I'm Australian, and
I well know how dial-on-demand and a flagfall can mix with very painful
results.

> [...]
> Gordon I have been looking for the logs on diald.....I doesn't seem to 
> track what ports activates dial?

See the diald man page for turning on detailed debugging.

> Should I use tcpdump?

Diald logs are the first place to look, but yes, seeing what happens
on the network is another way.

In any case, this is now straying a long way from development, so
the rest is up to you.

If you find bugs, please log them to [EMAIL PROTECTED]

If you want to discuss more appropriate policies for your phone charging
regime, let's move that to a new thread.

Gordon
--
 Gordon Rowell                         [EMAIL PROTECTED]
 Director, Engineering
 Network Server Solutions Group        http://www.e-smith.com/
 Mitel Networks Corporation            http://www.mitel.com/


--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to