Yes this is the first time I have seen a Sonicwall device not do it
correctly. It is one of the new TZ 170 devices.
Goran Jovanovic
The LAN Shoppe
2345 Yonge Street, Suite 302
Toronto, Ontario M4P 2E5
Phone: (416) 440-1167 x-2113
Cell: (416) 931-0688
E-Mail: [EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John
Tolmachoff (Lists)
Sent: Friday, January 09, 2004 3:53 PM
To: [EMAIL PROTECTED]
Subject: RE: [WhatsUp Forum] DNS services continuously going down and up
As a SonicWALL Certified Security Administrator, I always recommend to
hard
code the WAN interface to 10/half and the LAN interface to x/y with x y
being the highest available setting on the device connected to.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:WhatsUp_Forum-
> [EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> Sent: Friday, January 09, 2004 12:14 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [WhatsUp Forum] DNS services continuously going down and
up
>
> It is actually a new Sonicwall and I do not understand how it could
have
> auto-negotiated to 100/full with a hub???
>
> --------------------------------------------------------------
> Goran Jovanovic
> The LAN Shoppe
> 2345 Yonge St.
> Suite 302
> Toronto, Ontario, M4P 2E5
> Bus: 416-440-1167 x-2113
> Cell: 416-931-0688
> E-mail: [EMAIL PROTECTED]
> --------------------------------------------------------------
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of John
> Tolmachoff (Lists)
> Sent: Friday, January 09, 2004 2:06 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [WhatsUp Forum] DNS services continuously going down and
up
>
> Sounds like time for a new firewall. Not only bad, is technically not
> possible. Something in the firewall must be broken.
>
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
>
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:WhatsUp_Forum-
> > [EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> > Sent: Friday, January 09, 2004 8:14 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [WhatsUp Forum] DNS services continuously going down
and
> up
> >
> > Hi all,
> >
> > Well I thought that I would update you on this problem.
> >
> > The problem was that the firewall had negotiated a 100/Full
connection
> > to the hub. This as you all know is bad. It took a bit of digging
> since
> > I was focusing on the server and not the firewall. I reset the lint
to
> > 100/half and no more packet loss. I was seeing a constant 10 to 50%
> > packet loss on the link.
> >
> >
> >
> > Goran Jovanovic
> > The LAN Shoppe
> > 2345 Yonge Street, Suite 302
> > Toronto, Ontario M4P 2E5
> > Phone: (416) 440-1167 x-2113
> > Cell: (416) 931-0688
> > E-Mail: [EMAIL PROTECTED]
> >
> >
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of TC
Roffey
> > Sent: Friday, January 02, 2004 5:08 PM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [WhatsUp Forum] DNS services continuously going down
and
> up
> >
> > Or.......
> >
> > You're going over a vpn tunnel, right? I've got wug going over a
> cisco
> > vpn as well. And cisco says - In order for the tunnel to stay "up",
a
> > certain amount of interesting traffic at sufficient intervals needs
to
> > traverse the tunnel otherwise the vpn routers "times out" and takes
> down
> > the tunnel. So, the first dns query from whatever, user or wug, may
> not
> > be getting to the dns server. Result, dns service down. Wug tries
> > again and the service is there because the first query brought the
> > tunnel back up.
> >
> > TC
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Bond,
> Duncan
> > Sent: Friday, January 02, 2004 1:49 PM
> > To: '[EMAIL PROTECTED]'
> > Subject: RE: [WhatsUp Forum] DNS services continuously going down
and
> up
> >
> >
> > You should also note that if WUG is having the problem, so (most
> > probably) are the users of the DNS server. This can manifest in slow
> or
> > broken sessions; if the users have a backup server defined,
> transactions
> > will work, but will be slow because it takes time for the DNS
failure
> to
> > retry, then switch. We had a similar problem caused by improper
duplex
> > negotiation between DNS server and switch; WUG accurately reported
> > intermittency on the server.
> >
> > -----Original Message-----
> > From: Daniel Donnelly [mailto:[EMAIL PROTECTED]
> > Sent: Friday, January 02, 2004 4:41 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [WhatsUp Forum] DNS services continuously going down
and
> up
> >
> >
> > Goran,
> >
> > Have you tried increasing the Timeout on that device? I'd double it,
> for
> > now...
> >
> > I suspect some unknown load (Exchange??) on the server is causing a
> > random delay is answering the DNS query. Setting a longer timeout
may
> > cause the device to be seen as up more often . In other words, the
> > longer timeout may help, but may not make the problem go away, just
> > won't show up as often in WUG.
> >
> > If the longer timeout helps, then I'd look more carefully at that
> server
> > for resource issues...
> >
> > Dan Donnelly
> >
> > ----- Original Message -----
> > From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Friday, January 02, 2004 9:01 AM
> > Subject: RE: [WhatsUp Forum] DNS services continuously going down
and
> up
> >
> >
> > It is a Windows 2000 server, SP 4 running Exchange 2000 SP3 for
about
> 20
> > users. Not really high load at all.
> >
> >
> > Goran Jovanovic
> > The LAN Shoppe
> > 2345 Yonge Street, Suite 302
> > Toronto, Ontario M4P 2E5
> > Phone: (416) 440-1167 x-2113
> > Cell: (416) 931-0688
> > E-Mail: [EMAIL PROTECTED]
> > _____
> >
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of John
> > Tolmachoff
> > (Lists)
> > Sent: Friday, January 02, 2004 2:05 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [WhatsUp Forum] DNS services continuously going down
and
> up
> >
> > Is the DNS server a Windows server 200x server under very high
query
> > load with a large cache?
> >
> >
> >
> > John Tolmachoff
> > Engineer/Consultant/Owner
> > eServices For You
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Goran
> > Jovanovic
> > Sent: Thursday, January 01, 2004 8:52 PM
> > To: [EMAIL PROTECTED]
> > Subject: [WhatsUp Forum] DNS services continuously going down and up
> >
> > Hi All and Happy New Year to everyone,
> >
> > I am monitoring a number of my client's servers via a VPN tunnel and
> > there is this one server that is setup just like all the others but
it
> > keeps reporting that the DNS services goes down. Then on the next
poll
> > (or so) the services comes back to life. Life is fine for 30 to 90
> > minutes when the DNS goes down again. I have the alarm trigger set
to
> 4.
> > I have checked the server and there are no entries in the event log
> for
> > problems.
> >
> > Any thoughts on what could be causing the DNS to fail and then
> reappear?
> >
> > Thanx
> >
> > Goran Jovanovic
> > The LAN Shoppe
> > 2345 Yonge Street, Suite 302
> > Toronto, Ontario M4P 2E5
> > Phone: (416) 440-1167 x-2113
> > Cell: (416) 931-0688
> > E-Mail: [EMAIL PROTECTED]
> >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
> >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
