This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Concurrent Connection issue still in 9.350-12

Looking at my UTM last night after not visiting in a week surprised me with the concurrent connection issue still lingering...

I haven't changed a thing on my network, and this just decided to pop up for no reason.

Can we hope that this issue is being looked at/resolved?

This thread was automatically locked due to age.

0 BAlfson over 10 years ago

Yes, they said that the fix will be in 9.317, so I suspect that it also will be in 9.352.

A workaround at present is available:
Edit /etc/init.d/iptables
Comment out modprobe -q nf_conntrack_dns

The UTM must be rebooted for this to take effect.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Amodin over 10 years ago

Excellent, I anxiously await that fix. Thanks Bob.

This fix you posted, is this what I keep seeing in m network trafffic with my UTM reaching out to DNS ever other second?

XG 19.5 GA 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | GB Ethernet x5
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 10 years ago

I don't know. This is just the workaround suggested by Support for the growing connections issue.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 DAC1319 over 10 years ago

Bob,

Do you have any insight as to if the workaround will be overwritten when/if it's addressed in 9.352, or should I set myself a reminder to go in and back that out before I upgrade?
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 10 years ago

Do you have any insight as to if the workaround will be overwritten when/if it's addressed in 9.352
Yes, it'll be handled by the u2d patch.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Jas Man over 10 years ago

Same problem here. Just edited the iptables file and waiting for the update [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 MatthewSimon over 9 years ago in reply to BAlfson

Hi

Has this been fixed? Im on version 9.355-1.

If so what was the fix for you than what you posted about commenting out modprobe -q nf_conntrack_dns.

Thanks in advance!
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago in reply to MatthewSimon

This problem should have been fixed last year. Are you seeing a problem like the one in the graph at the top of this page?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 MatthewSimon over 9 years ago in reply to BAlfson

Hi BAlfson

Unfortunately yes I am still experiencing the problem. While looking at my logs I have started seeing a lot of "Scoreboard is Full"...
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago in reply to MatthewSimon

You should get Sophos Support involved if you have a paid license. If not, I would get several config backups off the device and re-install from ISO.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel