Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 3 subscribers
  • Views 1449 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection problem

nathy84
Hi

I have configured my astaro firewall. But when I do a ping from the internal LAN to the internet or also from the internet to the astaro firewall I have 1% request timeout. All the other pings have the same response time between 18 and 20 ms.
What could ths be?

Yours sincerely


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to nathy84
    It's likely that it's your ISP which is losing the packets; you could run a program like MTR or WinMTR to try to confirm that.

    MTR sends a LOT of ICMP traffic, so you'd need to throttle its settings, or create an exclusion in the ICMP flood protection in Astaro.

    Barry
  • 0 in reply to BarryG
    It is definetly a problem with the firewall. With MTR I can see that I have a loss with adsl-dynamic-241-170.deep.ch and that is my firewall.
    Any idea why I get this problem?

    Yours sincerely
  • 0 in reply to nathy84
    Is that your firewall, or the DSL router?

    I think Barry would suggest checking the MTU of the External interface, changing the cable between that and your DSL router then possibly experimenting with fixing the speed of the Ethernet adapter and/or setting it to half-duplex.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    That is my firewall. The firewall is doing PPPOE and there is a DSL modem in bridge mode.

    Yours sincerely
  • 0 in reply to nathy84
    If you replace the firewall with another device, does the packetloss go away?

    Try turning of the ICMP Flood settings temporarily and see if it makes a difference.

    Barry