This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ADSL drops connection after 30 seconds

Hi,
I have a small problem with a customer that is using ADSL to connect to the internet.  When I setup his packetfilter rules to be as safe as possible (no access from internet -> internal | only the necessary services accessible from internal -> internet like http, https, pop3, etc) the connection is dropped after about 30 seconds (see part of pppoe logfile below).  When i open up everything (all services in/outbound allowed) then i don't have that problem.... What can be the cause of this?  This is my first implementation with pppoe; should i open up any ports for this to work? I'm using Astaro 5.1

Regards,
Tim.

---------------
2005:01:05-21:02:51 (none) pppoe-sh: Got a Relay-ID: 00 00 00 01 00 02 3b 02 74 9d Access-Concentrator: 90064070300163-BAS-ASSEBROEK AC-Ethernet-Address: 00:90[:D]0[:D]b:86:24 --------------------------------------------------
2005:01:05-21:02:51 (none) pppd-pppoe[3761]: pppd 2.4.2 started by root, uid 0
2005:01:05-21:02:51 (none) pppd-pppoe[3761]: using channel 9
2005:01:05-21:02:51 (none) pppd-pppoe[3761]: Using interface ppp0
2005:01:05-21:02:51 (none) pppd-pppoe[3761]: Connect: ppp0  /dev/ttyp0
2005:01:05-21:02:52 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:02:55 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:02:58 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:03:01 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:03:04 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:03:07 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:03:10 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:03:13 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:03:16 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:03:19 (none) pppd-pppoe[3761]: sent [LCP ConfReq id=0x1     ]
2005:01:05-21:03:22 (none) pppd-pppoe[3761]: LCP: timeout sending Config-Requests
2005:01:05-21:03:27 (none) pppoe[3762]: Timeout waiting for PADS packets
2005:01:05-21:03:27 (none) pppd-pppoe[3761]: Script /usr/sbin/pppoe -I eth2 -m 1452 finished (pid 3762), status = 0x1
2005:01:05-21:03:27 (none) pppd-pppoe[3761]: Modem hangup
2005:01:05-21:03:27 (none) pppd-pppoe[3761]: Connection terminated.
2005:01:05-21:03:27 (none) pppd-pppoe[3761]: Exit.
2005:01:05-21:03:27 (none) pppoe-sh: DSL connection time shorter then 60 seconds (36 sec): Error? - wait 900 seconds

This thread was automatically locked due to age.

Parents

0 omega over 21 years ago

First you could log at the packetfilter.log to see what is really
rejected. But I do not understand what you are doing.
You seem to be overriding the Astaro-Settings for its own
services and you never seem to have heard about stateful
packet-filtering. Why do you explicitly reject traffic, which should
be the default anyway ?
Cancel
Vote Up 0 Vote Down

Cancel
0 timber666 over 21 years ago in reply to omega

Hi Omega,
thank you for your response.
I'm not doing really fancy stuff actually.... (and yes i know statefull packet filtering [:)] can see...

Tim.
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 21 years ago in reply to timber666

What hardware are you using? A small ascii diagram of network setup would be good.

ASL hardware, especially NICs
ADSL modem
Routers? Wireless?

ASL version??
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Simon Shaw over 21 years ago in reply to timber666

What hardware are you using? A small ascii diagram of network setup would be good.

ASL hardware, especially NICs
ADSL modem
Routers? Wireless?

ASL version??
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 timber666 over 21 years ago in reply to Simon Shaw

Hi all,

- I'm using the I-base book security appliance (datasheet: http://www.contecisc.nl/docs/BDBinDoc.asp?Id={0E64884D-FB4B-4190-A5AC-B34198409B29} ) - they use Realtek RT8139 nic's
- ADSL modem: Alcatel Speedtouch
- There are no other routers, WAP's, or whatsoever, ...
- ASL version: 5.100

Networksetup is really simple:
DSL-line Speedtouch Modem IBase Switch PC's / Servers

I've used an Linksys-router instead of the IBase appliance, and it worked without any trouble... If I open up everything, then I don't have any trouble either...

regards,
Tim.
Cancel
Vote Up 0 Vote Down

Cancel
0 timber666 over 21 years ago in reply to timber666

Does anybody have some tips for me please? My customer is waiting for a permanent solution

Tim.
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 21 years ago in reply to timber666

Fire up the connection and check the packet filter live log.
See if there are any packets TO/FROM your ISP that are being dropped that perhaps have to be let through.

You say ASL works fine if you have an ANY ANY ANY packet filter rule?
Cancel
Vote Up 0 Vote Down

Cancel
0 omega over 21 years ago in reply to Simon Shaw

Our dsl-solution with 5.1 works without problems.
Maybe you should backup the configuration and just reinstall.
Cancel
Vote Up 0 Vote Down

Cancel
0 timber666 over 21 years ago in reply to Simon Shaw

There is nothing in the packetfilter-log... indeed, the ASL works fine with the ANY ANY ANY.
I think this is very weird, as a matter of fact it really annoys me, because my customer bought this solution for more security on their network... but now i only have two options:
- open up everything and then the internetconnection works
- use packetfilterrules like it should be, but then the connection drops..

anyone any other tips?
Cancel
Vote Up 0 Vote Down

Cancel