This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection problem

Hi

I have configured my astaro firewall. But when I do a ping from the internal LAN to the internet or also from the internet to the astaro firewall I have 1% request timeout. All the other pings have the same response time between 18 and 20 ms.
What could ths be?

Yours sincerely

This thread was automatically locked due to age.

0 BarryG over 16 years ago

What does a traceroute show?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 nathy84 over 16 years ago in reply to BarryG

How do you mean that?
I have connection from the inside LAN to the internet and also from the internet to the astaro. But if I do a ping, sometimes I get a request timeout message.

Yours sincerelly
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 16 years ago in reply to nathy84

Try the traceroute or tracert command; the synax is the same as ping.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 nathy84 over 16 years ago in reply to BarryG

Tracert is working porperly.

Routenverfolgung zu user.dyndns.org [217.71.241.170]  über maximal 30 Abschnitte:

  1     1 ms     4 ms    10 ms  172.16.16.2
  2
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 16 years ago in reply to nathy84

It's likely that it's your ISP which is losing the packets; you could run a program like MTR or WinMTR to try to confirm that.

MTR sends a LOT of ICMP traffic, so you'd need to throttle its settings, or create an exclusion in the ICMP flood protection in Astaro.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 nathy84 over 16 years ago in reply to BarryG

It is definetly a problem with the firewall. With MTR I can see that I have a loss with adsl-dynamic-241-170.deep.ch and that is my firewall.
Any idea why I get this problem?

Yours sincerely
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to nathy84

Is that your firewall, or the DSL router?

I think Barry would suggest checking the MTU of the External interface, changing the cable between that and your DSL router then possibly experimenting with fixing the speed of the Ethernet adapter and/or setting it to half-duplex.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 nathy84 over 16 years ago in reply to BAlfson

That is my firewall. The firewall is doing PPPOE and there is a DSL modem in bridge mode.

Yours sincerely
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 16 years ago in reply to nathy84

If you replace the firewall with another device, does the packetloss go away?

Try turning of the ICMP Flood settings temporarily and see if it makes a difference.

Barry
Cancel
Vote Up 0 Vote Down

Cancel