Re: Watchgaurd and open connections

From: Rambler (tonyprice@supanet.com)
Date: 12/17/02


From: "Rambler" <tonyprice@supanet.com>
Date: Tue, 17 Dec 2002 12:59:37 -0000

Check your firewall logs for valid incoming/outgoing packets being blocked.
I had this problem and found I'd screwed the network traffic down too tight.
This resulted in open connections building up over time. Wasn't POP3, just
normal internet traffic in my case, as I knew just vwhat packet types and
ports to allow for POP3.

Rambler

"ASallade" <aaron@bardicdesign.com> wrote in message
news:1040088617.695338@yasure...
> Hello,
>
> I run a Watchguard FireboxII and am having a problem with connections
> staying open indefinately after remote users check thier pop3 mail. My
> traffic is low, but load is high...
>
> At any given time I will have 100 connections on port 110 to each of 2
> remote users. Thats 200 connections.
>
> These are slowly adding up throughout a day. after each time the user
checks
> thier mail, 3 connections remain.
>
> I can turn off the mail server, have the user turn off the mail client and
> the connections remain. No traffic is moving accross them, they are just
> using up firewall resources keeping them open.
>
> I know the remote users systems well, and they are running personal
software
> firewalls, good antivirus, spyware trackers etc.
>
> I think that it may be some sort of error in closing the connection. Not
> sure if its related to my firewall or my mail server though.
>
> Do any of you have advice on this?
>
> Thanks,
> Aaron
>
>



Relevant Pages

  • Watchgaurd and open connections
    ... I run a Watchguard FireboxII and am having a problem with connections ... staying open indefinately after remote users check thier pop3 mail. ... sure if its related to my firewall or my mail server though. ...
    (comp.security.firewalls)
  • Re: What is the Pattern here ?
    ... These are all Dialup Connections that I had no connection with at the time. ... It's obviously an enormous security hole, ... > and a real firewall box. ...
    (comp.security.firewalls)
  • Re: Black Ice confesses faulty program!!!
    ... > outgoing connections or traffic except in cases where these connections ... > "dangerous/suspicious" traffic by the BlackICE program. ... > get into your machine then even a PC *without* a firewall is completely ... If you don't think "Spyware" is a problem for computer ...
    (comp.security.firewalls)
  • Re: Port 135
    ... The patch doesn't disable DCOM / RPC, so connections can still be made. ... That's why you need a firewall. ... the patch is not the thing to control ... control over your TCP/IP ports and services, ...
    (microsoft.public.security)
  • Re: Networking/Security Question...
    ... The router itself will be a Cisco 1721. ... >setup is very simple... ... XP sp2 having the firewall on by default. ... > # but deny established connections that don't have a dynamic rule. ...
    (freebsd-net)