We are having the same problem - periodic slowness and some unavailable web sites. The problem started about a month ago, and was unrelated to any changes/upgrades on the firewall, so I have been dismissing the firewall as a source of the problem. The ISP is denying they are having a problem, and say they are testing similarly attached networks. We see traceroutes to these problem web sites fail about four to six hops away.
Our "outages" happen three or four times a week, at different times of the day, and last for 5 to 45 minutes. The problems go away without any intervention on our part. We are on R55 HFA 17, with plans on going to R61 HFA 1 in the near future. Mick Toothaker Fidelity Bank, Wichita KS -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of John Kaftan Sent: Friday, December 08, 2006 12:33 PM To: [email protected] Subject: [FW-1] Slowness to Misc web sites. I have been working the issue where a handful of web sites are either being incredibly slow to get to or not at all available e.g. ebgames.com, connexion.oclc.org, yellowpages.superpages.com. All of our ip addresses NAT to 65.220.79.5 on the way out of the firewall. I have discovered that If I create a static NAT mapping from my machine on our network to 65.220.79.81 outbound then the problem goes away. Also I have noticed that I am not totally denied. I can ping these sites and even connect via a telnet session on port 80. It appears to be just incredibly slow to these sites when I am using 65.220.79.5 as my NATTed address. I called CP and they could not come up with anything. Basically these sites, or some device between us on these sites, does not like the source IP of 65.220.79.5. The only thing I can think of is that we have been Black listed and some reverse-proxy service or something does not like .5 and is choking us off. Does anybody have any other insight? ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
