In my experience, turning off the antivirus in the proxies fixes the
problem.  This is not an absolute, but it's easy to test.

 

Lane Beneke

Southern Piping Company

Wilson, NC, USA

 

________________________________

From: Eduardo Silva [mailto:harris...@gmail.com] 
Sent: Thursday, February 26, 2009 9:43 AM
To: efw-user@lists.sourceforge.net
Subject: Re: [Efw-user] Network performance problem

 

During my google researches I already found some people with the same
problem, but didnt found any solution.
Any suggestions? or help?

Thanks

On Tue, Feb 24, 2009 at 6:03 PM, Eduardo Silva <harris...@gmail.com>
wrote:

Hello,


I have an endian Firewall on my company. We do have about 15users
(computers) and about 15 sip phones. Our PBX, mailserver and fileserver
stay on the orange segment. (check the attached image for topology)

I noticed that my endian box is having some huge performance problems.
If i try to copy a file using any protocol (scp, ftp, http) from one
network to any other network i will have a very slow transfer rate,
something like 200kbps and all other applications that run across
endian, become slow or unusable (voip gets impossible to use while
copying a file or browsing the Internet).

Just for information, the same hardware of this box was being used by
CentOS 5.1 and running without any problems during more than 1 year.

Any suggestions?

Thanks in advance!



Additional info:

eth0: negotiated 100baseTx-FD, link ok
  product info: vendor 00:00:00, model 0 rev 0
  basic mode:   autonegotiation enabled
  basic status: autonegotiation complete, link ok
  capabilities: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
  advertising:  100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
  link partner: 100baseT4 100baseTx-FD 100baseTx-HD 10baseT-FD
10baseT-HD
eth1: negotiated 100baseTx-FD, link ok
  product info: vendor 00:00:00, model 0 rev 0
  basic mode:   autonegotiation enabled
  basic status: autonegotiation complete, link ok
  capabilities: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
  advertising:  100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
  link partner: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
flow-control
eth2: negotiated 100baseTx-FD, link ok
  product info: vendor 00:07:49, model 1 rev 1
  basic mode:   autonegotiation enabled
  basic status: autonegotiation complete, link ok
  capabilities: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
  advertising:  100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
flow-control
  link partner: 100baseT4 100baseTx-FD 100baseTx-HD 10baseT-FD
10baseT-HD
eth3: negotiated 100baseTx-FD, link ok
  product info: vendor 00:aa:00, model 51 rev 0
  basic mode:   autonegotiation enabled
  basic status: autonegotiation complete, link ok
  capabilities: 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
  advertising:  100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD
flow-control
  link partner: 100baseT4 100baseTx-FD 100baseTx-HD 10baseT-FD
10baseT-HD

# lspci
00:00.0 Host bridge: Intel Corporation 82845 845 [Brookdale] Chipset
Host Bridge (rev 03)
00:01.0 PCI bridge: Intel Corporation 82845 845 [Brookdale] Chipset AGP
Bridge (rev 03)
00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev 12)
00:1f.0 ISA bridge: Intel Corporation 82801BA ISA Bridge (LPC) (rev 12)
00:1f.1 IDE interface: Intel Corporation 82801BA IDE U100 Controller
(rev 12)
00:1f.2 USB Controller: Intel Corporation 82801BA/BAM USB Controller #1
(rev 12)
00:1f.3 SMBus: Intel Corporation 82801BA/BAM SMBus Controller (rev 12)
00:1f.4 USB Controller: Intel Corporation 82801BA/BAM USB Controller #1
(rev 12)
01:00.0 VGA compatible controller: ATI Technologies Inc Rage 128 Pro
Ultra TF
02:08.0 Ethernet controller: Intel Corporation 82801BA/BAM/CA/CAM
Ethernet Controller (rev 03)
02:09.0 Ethernet controller: ADMtek NC100 Network Everywhere Fast
Ethernet 10/100 (rev 11)
02:0a.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
RTL-8139/8139C/8139C+ (rev 10)
02:0b.0 Ethernet controller: Realtek Semiconductor Co., Ltd.
RTL-8139/8139C/8139C+ (rev 10)
# cat /proc/cpuinfo
processor    : 0
vendor_id    : GenuineIntel
cpu family    : 15
model        : 1
model name    : Intel(R) Pentium(R) 4 CPU 1.70GHz
stepping    : 2
cpu MHz        : 1693.739
cache size    : 256 KB
fdiv_bug    : no
hlt_bug        : no
f00f_bug    : no
coma_bug    : no
fpu        : yes
fpu_exception    : yes
cpuid level    : 2
wp        : yes
flags        : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm up
bogomips    : 3391.12
clflush size    : 64

 

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to