Intermitent Connection and Socket Errors

[jecoyote]

Hello pascal.

I just like to know what could be my problem.

last night i upgrade from version 4.11 to version 6.0.1
since that time i'm getting connection and after a sort of time i get http 500 error, i just go to iexplorer and turn off the show friendly http errors and the message i getting now is Socket Error "Remote Network Unreachable".

after a few tries i got internet again. Should i upgrade from version 6.0.1 to version 6.0.4? or theres anotherway to solve this problem?

JECoyote

[labull]

I'm not Pascal (he's much taller) but I believe he'd agree that upgrading to 6.0.4 is a good idea.

That would eliminate any issues fixed since 6.0.1.

Be sure in the Network tab of GateKeeper you have your adapters properly defined as Internal and External.

Let us know how it goes.

Larry

[jecoyote]

Hello labull.

Sorry about posting for Pascal, but i was looking info about my problem and see that he was the only one answering here.

i just upgrade to version 6.0.4 and still getting the same error message and sometimes this one too "Connection to Remote Host Timed Out"

The network section in gatekeeper is configure fine "i think".

NIC 1 for Local Network (Internal) and

NIC 2 for the Internet Connection (External).

or should be configure any other way?

Jecoyote

[labull]

When you have problems can you still access the internet from the wingate server?

[labull]

When you have problems can you still access the internet from the wingate server?

[jecoyote]

Yes... Still can connecto to internet from the wingate server.

the problem is with the wingate users.

this u have 2 know, i dont use the wingate client for the users to connect 2 internet. i use the proxy settings configuration of the applications we use for the internet: Internet Explorer, MSN Messneger etc.

Any other suggestion!


Jecoyote

[jecoyote]

No Ideas?

[labull]

No Ideas?

None that I can think of. The smart guys are watching and I'm sure they'll have an idea to try.

[Pascal]

I'm not Pascal (he's much taller)

And much uglier, if you believe Larry. The first thing I'd look into would be DNS. Can you perhaps post / email the results of an "ipconfig/all" (Cmd prompt) here?

[jecoyote]

Hello Pascal.

Here is the IPCONFIG /ALL

I have not configure DNS and WINS in Wingate and have the DHCP Disable

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : internet
Primary DNS Suffix . . . . . . . : domain
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : domain

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI TX NIC
(3C905B-TX)
Physical Address. . . . . . . . . : 00-00-00-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.3
Subnet Mask . . . . . . . . . . . . : 255.0.0.0
Default Gateway . . . . . . . . . : 10.0.0.1
DNS Servers . . . . . . . . . . . : 200.0.0.22
196.0.0.132

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast Ethernet
Controller (3C905C-TX Compatible)
Physical Address. . . . . . . . . : 00-00-00-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 18.0.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 18.0.0.5
DNS Servers . . . . . . . . . . . : 18.0.0.8
Primary WINS Server . . . . . . . : 18.0.0.8


Thanks in Advanced

[labull]

I never said he was ugly.

I just said his look was "interesting". ; )

[Pascal]

As they say here in NZ, "strueth". It was "interesting" if I recall correctly.

jeycoyote: are you running on an active directory?

It would be useful if you could switch on debug logging for the WWW Proxy Service and the DNS/WINS Resolver service. Monitor the problem until it occurs, then check for the URL that the user requested in those log files. Once you've found that, post/email the results, please.

You can switch on debug logging in the logging page of each service. You can find the logs in the "WinGate\Logs\Service" name folder.

[jecoyote]

Hello Pascal.

Yes i'm within AD but i'm not using the list of users of the AD
just export the list and then import it to wingate.
if i need to create an user i create it in wingate.

this is what u ask for

This are the errors For WWW Proxy
-----------------------------------------
Error: Caught socket exception in
CWWWSession::HTTPProcessRequest() Remote Network Unreachable - terminating

Error: Caught socket exception in CWWWSession::HTTPProcessRequest() Connection to Remote Host timed out - terminating

Error: Caught socket exception in CWWWSession::HTTPProcessRequest() Host name lookup for 'www.google.com.do' failed - terminating


This are for DNS Resolver
------------------------------
Error: bounce request [02e2d990]<1> to try 3 (no specific and cannot select)
04/04/05 07:22:30 Request: request [02e2d014] A lookup "www.google.com."

there are many of this for different web pages

and no errors for WINS resolver.

Thanks in advanced for all your help, but if we cannot get this work i'll be forced to go back to version 4.11 that works fine. except for the users problems i ask a few month ago (duplicated users) solved in this version.

[Pascal]

What I suspect is happening is a relatively common problem. The AD Server usually acts as a DNS Server for the WinGate Server. In turn, WinGate usually acts as a DNS Forwarder for the AD Server as well. When this happens, WinGate will begin making requests to the AD server, who'll bounce those back to WinGate, etc.

If you go to Start -> Programs -> WinGate you will find an application called "Advanced Options". Advanced Options has a tab where you can specify DNS Servers that are to be excluded from WinGate's normal operation. So, even if WinGate detects your DNS Server you can tell it to ignore it.

Try adding your AD Server's internal IP to that list and trying it again.

[erwin]

Hi there

Just to add, if you want to make sure your DNS server is configured correctly with WinGate in the Active Directory you can read our knowledgebase articles on this here

http://support.qbik.com/index.php?_a=kn ... ails&_i=82

and this info is also in the latest version of the helpfile.

Regards
Erwin

[jecoyote]

Hello pascal

I just did what u told me and still getting the same error.

this is other error in the DNS Resolver

04/02/05 09:21:44 Request: request [0143d420] PTR lookup "132.0.0.18.in-addr.arpa."

debug
-------
WWW Session sending server request in thread 578
Server response contains 1929 bytes of resource data
WWW Session Processing HTTP response in thread 330 - response code 200
Server response contains 43 bytes of resource data
WWW Session Processing HTTP response in thread 23c - response code 200
WWW Session Processing HTTP response in thread 5c8 - response code 304
WWW Session Processing HTTP response in thread 284 - response code 304
WWW Session Processing HTTP response in thread 578 - response code 304
WWW Session Processing HTTP response in thread 5c8 - response code 304

[Pascal]

That's not an error, those second snippets of the logs look fine. Can you mail me the logfiles, please?

[jecoyote]

is a little big, can u tell me what u need to see and i can send u that part?

[Pascal]

Ideally a cross section of the DNS Resolver and WWW Proxy Service for the affected time-frame. (New version, thereof). Be sure that debug logging is on for both services when you try and replicate the problem.

[jecoyote]

i just sent u an email with part of the logs

DNS Resolver and
WWW Proxy

Take a look and let me Know.


THX

[Pascal]

Thx. Will post back here once I have them.

[jecoyote]

well i hope that wingate let it go....

[jecoyote]

done, check your email

[Pascal]

done, check your email

Sir, yes sir! :) Got the file and had a quick garner through it. The DNS Resolver log does not seem to include any debug information. I'd expect it to show something like:

10/19/04 12:06:50 DNS Resolver thread starting
10/19/04 12:07:35 Request: request [012868d0] A lookup "news.sina.com.cn."
10/19/04 12:07:35 Debug: bounce request [012868d0]<0> to try 1 (nothing useful in cache)
10/19/04 12:07:35 Debug: selected 192.168.0.60 <user input> for request [012868d0]<1> (best looking)
10/19/04 12:07:35 Debug: request [012868d0](ID 1) sent to 192.168.0.60 <user input> (34 bytes)
10/19/04 12:07:35 Debug: received block [434] (server 192.168.0.60, port 53)
10/19/04 12:07:35 Debug: useful response [012868d0](ID 1) (0.28s)
10/19/04 12:07:35 Request: request [01287348] A lookup "jupiter.sina.com.cn."
10/19/04 12:07:35 Debug: selected 192.168.0.60 <user input> for request [01287348]<1> (best looking)
10/19/04 12:07:35 Debug: request [01287348](ID 2) sent to 192.168.0.60 <user input> (37 bytes)
10/19/04 12:07:35 Debug: received block [415] (server 192.168.0.60, port 53)
10/19/04 12:07:35 Debug: useful response [01287348](ID 2) (0.00s)
10/19/04 12:07:35 Request: request [01284a48] A lookup "libra.sina.com.cn."
10/19/04 12:07:35 Debug: selected 192.168.0.60 <user input> for request [01284a48]<1> (best looking)
10/19/04 12:07:35 Debug: request [01284a48](ID 3) sent to 192.168.0.60 <user input> (35 bytes)
10/19/04 12:07:35 Debug: received block [393] (server 192.168.0.60, port 53)
10/19/04 12:07:35 Debug: useful response [01284a48](ID 3) (0.01s)
10/19/04 12:07:50 Debug: DNS registry entry scan (0 total entries)

when full debug logging is on. The errors in the WWW Proxy Service are more interesting. You are getting:

Caught socket exception in CWWWSession::HTTPProcessRequest() Connection to Remote Host timed out - terminating

occasionally as well as

Error: Caught socket exception in CWWWSession::HTTPProcessRequest() Remote Network Unreachable - terminating"

You know all of that as well, I see from your earlier posts that you went to quite a bit of trouble to try and diagnose it first. Those messages makes it look as if there is some problems reaching the remote networks. (Legitimately, as those messages are directly from the socket level error codes) It could potentially be routing related, looking at your adapter setup.

Now, I'd like to know a bit more about those adapters you have. The 3Com EtherLink (10.0.0.3) is your Internet NIC (Public) while the 3Com 3C920 (18.0.0.8) is your LAN NIC (Private), correct?

I note that both adapters have default gateways, so I'm concerned that you might end up with multiple default routes - which has been known to cause problems on WinGate setups. If not absolutely required, can you try removing the local adapter's default gateway to see if that helps alleviate the problem?

[jecoyote]

Yes i've try to solve the problem before posting here, but no solution.

i just take my lan gateway of my configuration i will keep following this error until i get a solution for it, a really dont want to go back to old 4.11 version. This one solve one of my old problem (duplicated users) and i think that this could be solved.

is a shame that there are many hours of differences between u and me, so we can keep in touch till get this working just like it has to.


right now here 10:44 pm
i'm leaving right now, i'll ask my partners tomorrow about how was the internet and i'll let u know what happends.

THX in Advanced for your patience.

[jecoyote]

Hello pascal.

everything seems to be working fine now.

i didnt have time to test the internet much, but the while i was in were no problems.


thanks for all the help u give me.
and i'll be in touch if something happends.

latez

[Pascal]

Excellent, glad to hear that sorted it. Will be here if it didn't :)

[jecoyote]

Hello pascal.

i've been a little out on this problem.
i still think is working fine, i have been finishing other things out of the office and havent ask users about intetnet connectivity, but as soon as i can get some info i'll let u know.


i have a question about wingate VPN
after i install the wingate version 6.0.4 i've seen an wingate VNP monitor.
i went to licence management to get a free trial serial number.

but everytime i double click on the vnp icon i get wingate gatekeeper.

can u tell how or where to get the vnp configuration tabs.
i'd like to test this and see how it works.

thx in advanced

[Pascal]

The VPN monitor launches GateKeeper, which is the central configuration tool for both WinGate and WinGate VPN.

If you look on the System Tab of WinGate you should see a VPN icon. Double click that to access the VPN configuration. Note though that you would have to restart the engine after the license was requested (As it should have prompted) for the change to be applied and the icon to become visible.

If you are using a trial license it should be visible in any event (Included in Enterprise editions, which the trial licenses are)