RAS behaviour.

[Nev]

Hi all,

V5.0.10 dialer is being requested at the default interval as per:

10/15/03 10:03:40 BIGPOND: Dialing...(requested by )
10/15/03 10:03:49 BIGPOND: Resetting BIGPOND
10/15/03 10:04:53 BIGPOND: Dialing...(requested by )
10/15/03 10:04:59 BIGPOND: Resetting BIGPOND
10/15/03 10:05:00 BIGPOND: Dialing...(requested by )
10/15/03 10:05:09 BIGPOND: Resetting BIGPOND
10/15/03 10:07:10 BIGPOND: Dialing...(requested by )
10/15/03 10:07:16 BIGPOND: Resetting BIGPOND
10/15/03 10:07:17 BIGPOND: Dialing...(requested by )
10/15/03 10:07:26 BIGPOND: Resetting BIGPOND

Nothing in the server is requesting the dial in, no clients are connected, no traffic is sent once the connection establishes, GateKeeper shows no activity or log entry, nor does the Firewall tab, the pc scans to be clear of virii and trojans and the default Windows connectoid does not attempt to connect even though enable to do so.

Re-install of Wingate, check of NAT and other features didn't shed any light on a possible problem.

Any suggestion appreciated.

Thank's.

Nev.

[Nev]

Dialer is driving me crazy:

If nothing is requesting it why is is it dialing?

NAT disabled and it stops!

This PC has an external interface that is receiving incoming ping [welchia/nimda/msblaster etc] traffic all the time, if it is disconnected the dial looping stops.

Connect the cable and as soon as the firewall / nic shows activity off goes the dialer!

10/17/03 14:58:03 BIGPOND: Dialing...(requested by )
10/17/03 14:58:03 Debug: BIGPOND: Dialing Synchronous...
10/17/03 14:58:03 Debug: BIGPOND: RasDial call failed error 797
10/17/03 14:58:03 Debug: BIGPOND: RasDial call failed but non-null handle - resetting
10/17/03 14:58:05 Debug: BIGPOND: Off line.
10/17/03 14:58:05 Debug: BIGPOND: Dial unsuccessful - resetting
10/17/03 14:58:05 BIGPOND: Resetting BIGPOND
10/17/03 14:58:05 Debug: BIGPOND: Resetting BIGPOND
10/17/03 14:58:05 Debug: BIGPOND: Disconnecting from: BIGPOND
10/17/03 14:58:05 Debug: RasHangUp returned error code 6
10/17/03 14:58:05 Debug: BIGPOND: No connection
10/17/03 14:58:05 Debug: BIGPOND: Could not find connection to reset
10/17/03 14:58:05 Debug: BIGPOND: Disconnecting from: BIGPOND
10/17/03 14:58:06 Debug: BIGPOND: Dialing: BIGPOND
10/17/03 14:58:06 BIGPOND: Dialing...(requested by )
10/17/03 14:58:06 Debug: BIGPOND: Dialing Synchronous...
10/17/03 14:58:06 Debug: BIGPOND: RasDial call failed error 797
10/17/03 14:58:06 Debug: BIGPOND: RasDial call failed but non-null handle - resetting
10/17/03 14:58:08 Debug: BIGPOND: Off line.
10/17/03 14:58:08 Debug: BIGPOND: Dial unsuccessful - resetting
10/17/03 14:58:08 BIGPOND: Resetting BIGPOND
10/17/03 14:58:08 Debug: BIGPOND: Resetting BIGPOND
10/17/03 14:58:08 Debug: BIGPOND: Disconnecting from: BIGPOND
10/17/03 14:58:08 Debug: RasHangUp returned error code 6
10/17/03 14:58:08 Debug: BIGPOND: No connection
10/17/03 14:58:08 Debug: BIGPOND: Could not find connection to reset
10/17/03 14:58:08 Debug: BIGPOND: Disconnecting from: BIGPOND
10/17/03 14:58:09 Debug: BIGPOND: Off line.

Any suggestion appreciated.

Nothing in the server is requesting the dial in, no clients are connected, no traffic is sent once the connection establishes, GateKeeper shows no activity or log entry, nor does the Firewall tab, the pc scans to be clear of virii and trojans and the default Windows connectoid does not attempt to connect even though enable to do so.

Re-install of Wingate, check of NAT and other features didn't shed any light on a possible problem.

Thank's.

Nev.

[Nev]

Hi all,

Dialer is driving me crazy:

Here is the NAT log and an ICMP inbound hit on the firewall:

10/20/03 12:39:26 Debug: WinGate Dialer failed connection
10/20/03 12:39:26 Authorisation failure: NAT STATUS: firewall block: ICMP src 203.173.192.85:0 dst 203.173.178.56:0

Here is the NAT log and an ICMP inbound hit on the firewall with 'Assumed user' security enabled for the dialer:

10/20/03 14:48:39 Debug: You do not have any access to any active dialers. Contact your system administrator
10/20/03 14:48:39 Authorisation failure: NAT STATUS: firewall block: ICMP src 203.144.78.194:0 dst 203.173.178.56:0

My question is, should firewall hits initiate the dialer?

Thank's.

Nev.

[adrien]

OK, you could try blocking the ping from external...

If WinGate ENS finds a packet it has no route for, it tells the engine, which if it is set to autodial will dial up... this must be what is happening.

[Nev]

OK, you could try blocking the ping from external...

If WinGate ENS finds a packet it has no route for, it tells the engine, which if it is set to autodial will dial up... this must be what is happening.

Good Adrien thanks, have applied a policy level to the dialer that
'User must be assumed' and that seems to have slowed the problem.

BTW?: If 'Allow users to ping from internet' is un ticked this is external block am I correct, if so that has always been enabled.

Nev.