Engine crash.

[Mendoza]

Hello all of you.
First I want to say that I do not have a car so no...it is not about my car.
I have a problem...(wait I have many with this software) with Wingate 5.2.2.In logs I see somethig like this:

01/10/04 19:12:29 AntiVirus Unable to locate PluginDKAV.dll in any of the search paths. Plugin will not function
01/10/04 19:12:35 PudKCtWk4MUEqABxAQAAAAYAUPzAxIMABTH49ZsAAEUAADy/1UAAPAY/iz7nSgrVpODFBKgAcazvMVEAAAAAoALgACHHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
01/10/04 19:12:38 PudKCtWk4MUEqABxAQAAAAYAUPzAxIMABTH49ZsAAEUAADwKyUAAPAb0lz7nSgrVpODFBKgAcazvMVEAAAAAoALgACCbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
01/10/04 19:12:41 PudKCtWk4MUEqABxAQAAAAYAUPzAxIMABTH49ZsAAEUAADxFRkAAPAa6Gj7nSgrVpODFBKgAcazvMVEAAAAAoALgAB9bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
01/10/04 19:12:44 PudKCtWk4MUEqABxAQAAAAYAUPzAxIMABTH49ZsAAEUAACyD9UAAPAZ7ez7nSgrVpODFBKgAcazvMVEAAAAAYALgAJVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
01/10/04 19:12:48 PudKCtWk4MUEqABxAQAAAAYAUPzAxIMABTH49ZsAAEUAACzBOEAAPAY+OD7nSgrVpODFBKgAcazvMVEAAAAAYALgAJVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
01/10/04 19:12:51 PudKCtWk4MUEqABxAQAAAAYAUPzAxIMABTH49ZsAAEUAACwIc0AAPAb2/T7nSgrVpODFBKgAcazvMVEAAAAAYALgAJVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
Well...after all this crap my server blocks.
Of course I get more that what I posted here but...no spam
What can I do?
Yes, I know, move to linux but...I do not have the time.
Can I mention that Wingate keeps on blocking very very often?I gues not...because everybody knows that.Still, with so many versions and still none stable?
A tip:If Wingate hungs on startup wait for it to stop (shutdown engine) and then delete all history.* from install dir.
Also if you have Kaspersky Antivirus installed (not the plugin)the engine will not start.So delete the plugin from Plugins dir and it will.
I haven't found the solve to this 2 anywhere.
Come on you guys U can do better that this....
I know that is hard...but all I want is to WORK.Not best perf., not funky specs but JUST WORK.
Thanks for reading and hope to get an answer for my problem
God speed

[labull]

Seems like your DKAV install is confused. You've removed the files from the plug-in directory try removing the license also so it won't look for them.

Those second messages indicate firwall hits. They have been explained elsewhere in this forum but I can't find the reference right now.

You could try turning of "Notify when this range is accessed" under ENS - Port Security to see if logging the hits is the problem.

5.2.2 very stable here - system has been up and running since the release (22 days) with no problems.

Larry

[Mendoza]

You lucky devil :)
Good for you.
I forgot to mention that this happend after I disable a user.After 1 minute frezees.
Also i have to mention that I have installed Bandwidth Controller 10b and got into troubles with Wingate proxy.
The bindings for internal didn't want to "bins' to the internal interface.
Whatever.......:))

[Pascal]

You lucky devil :)
Good for you.
I forgot to mention that this happend after I disable a user.After 1 minute frezees.
Also i have to mention that I have installed Bandwidth Controller 10b and got into troubles with Wingate proxy.
The bindings for internal didn't want to "bins' to the internal interface.
Whatever.......:))

Hi,

1. PluginDKAV warning:

To get rid of the PluginDKAV warning, open the registry editor. Please note, all the regular warnings and disclaimers with editing the registry apply. Make sure you export your WinGate registry and that you have an appropriate backup / system restore point available.

Then navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Data Scanning Plugins\Installed\Antivirus

and delete that Key. That will remove all knowledge of the plugin from WinGate.

2. Disabled user
Which user did you disable that started causing the freeze ?

3. Bandwidth controller
Can you provide a link to the software you installed ? I'd like to have a look at how it works - if it prevents WinGate from binding to the internal interfaces, I'm not suprised that you have problems.

Thanks in advance,

[Mendoza]

Thanks for the advice.
I have unninstalled bandwidth Controller and now Proxy binds corectly to the internal interface.
The user I have disabled is part of the "users" group.
Just a few minutes ago after I have disabled again one user, the serevr rebooted like after 4 seconds.Very very strange.
Another problem is that I have admin rights on the server, policies are well set but still I can't see the services like NAT and DNS.I can see proxy.
If I login directly on the server than I can acces all of those.
I guess the only solve is a clean install.I am tired of patching and stuff...
If anybody can help me please...it is the right time :)
I have Win XP with all updates on a KT333 with 386 MB RAM and an AMD proc 1.8 XP.
And by the way....I just saw The last 'Lord of the rings".Nice effects, great battles...come on....I cry more when I see Tom and jerry.
Still well worth every penny.Go and watch it (Only in theatres)

[Pascal]

Just a few minutes ago after I have disabled again one user, the serevr rebooted like after 4 seconds.Very very strange.
Another problem is that I have admin rights on the server, policies are well set but still I can't see the services like NAT and DNS.I can see proxy.
If I login directly on the server than I can acces all of those.
I guess the only solve is a clean install.I am tired of patching and stuff...
If anybody can help me please...it is the right time :)
I have Win XP with all updates on a KT333 with 386 MB RAM and an AMD proc 1.8 XP

So you disable the user ... does that coincide with activity for the user ? I.e. are they busy surfing / checking email / etc. when you disable them ?

Do you have a normal WinGate license (Originally Plus) or a WinGate Pro license (Pro / Enterprise) ?

[Mendoza]

I have a licence for PRO version.
Curently I have ver. 5.2.2 installed.
Indeed, the user I am trying to disable has many NAT connexions.That is why I am disabling his account.Or...I am trying...:))
A month ago I had Windows 2000 Server.Still many problems.I changed the op sys to XP cause I thought 2k had something to do with instabillity.
You recon XP is not good for a gateway machine?

[Pascal]

I have a licence for PRO version.
Curently I have ver. 5.2.2 installed.
Indeed, the user I am trying to disable has many NAT connexions.That is why I am disabling his account.Or...I am trying...:))
A month ago I had Windows 2000 Server.Still many problems.I changed the op sys to XP cause I thought 2k had something to do with instabillity.
You recon XP is not good for a gateway machine?

Ah, PRO is good then. (Was wondering about remote login for GK). It's really odd then that you cannot see ENS / DNS / etc. Does that user have the appropriate rights to configure those services ? OR do you get any error messages when you log-in with GateKeeper ?

XP should be fine.

[Mendoza]

The link for tha software I have mentioned is http://bandwidthcontroller.com/
Although a very good bandwidth managemnt software.....not working with my gateway solution.Please advice

[Pascal]

Hi,

A few more questions - QA is trying to reproduce this problem but it seems to work fine here ...

You use NAT to connect your users to the Internet. Do you have Transparent Redirection switched on ?

Is there a particular type of NAT traffic that causes the problem ? (Excessive web use / BearShare / eMule / etc.)

How are your users authenticated, if at all ? (Do you use assumed IPs, etc.)

Does WinGate hang or does the system physically reboot when you disable the user ?

Can you still log in with GateKeeper ?

[Mendoza]

1:You use NAT to connect your users to the Internet. Do you have Transparent Redirection switched on ?
*Yes In the proxy Service tab I have checked Transparent Redir.

2:Is there a particular type of NAT traffic that causes the problem ? (Excessive web use / BearShare / eMule / etc.)
*Yes.I do not know wjat kind of software was runnig because all the NAT connexions were using different ports.The user said he had a virus.SOmething like Win32 PARITE.

3:How are your users authenticated, if at all ? (Do you use assumed IPs, etc.)
*I create an account in windows.Then I assume by IP.All general policies are ignored and set manualy.Like "Users who can access to this service"=users,admnistrators

4:Does WinGate hang or does the system physically reboot when you disable the user ?
*The last time this happend, the system rebooted after 3 seconds.

5.Can you still log in with GateKeeper
*Yes.After the system is up and running.:))


About the problem with not seeing some services in Gatekeeper.
I have checked the ver of Gatekeeper and it is 5.2.2.The size of the exec was the same as on the server.I have copied the exec from server to my computer over the old one (same size) and now it is working.Strange.
Please tell me.If the server is shutdown after a power surge or something and Wingate hungs on start, was is the deal with the 2 history files?I told you that if I delete those, the engine starts.And after that it sais something about NAT not beeing enabled.I have to double click n the error msg and enable it.Is this a bug?I hope it will be corrected.
Have a good day Pascal and I am waiting for your answer.
Keep the good work and you will have many satisfied customers.

[Pascal]

I have checked the ver of Gatekeeper and it is 5.2.2.The size of the exec was the same as on the server.I have copied the exec from server to my computer over the old one (same size) and now it is working.Strange.

Very strange. Perhaps there was a slight version mismatch (Build numbers, perhaps ?) Did you ever receive a 'debug kit' or special build of WinGate for debugging ?

Please tell me.If the server is shutdown after a power surge or something and Wingate hungs on start, was is the deal with the 2 history files?I told you that if I delete those, the engine starts.

Sometimes they do get corrupted. It is a reasonably rare occurence though.

And after that it sais something about NAT not beeing enabled.I have to double click n the error msg and enable it.Is this a bug?I hope it will be corrected.

No, what happens is if the system fails to boot / shutdown cleanly it will remember that. After 2 or 3 boots like that, it will disable the NAT/ENS driver - in-case that is causing the conflict. This is similar to Windows running scandisk when you simply switch the PC off without shutting it down.

Does this happen every time you reboot the machine ?

[Mendoza]

Thanks for such quick replies.
5.2.2 ver has only one build if I remember corectly.892.
I haven't received any special builds or debug versions.
And no...thank god.It doesn't happen' at every reboot.
I have "programed" the server to reboot every morning at 6.
You can imagine that if that would have happend, now I would be a crazy man.
I have many questions for Wingate devs but I wonder.All these questions aren't bothering you guys?
Still....thank you for your effort.
And one more problem.I told you that every morning I reboot my server.
Is it safe to just reboot it?Or safer to schedule in Wingate to terminate all active connections>shutdown all services>shut down wingate and only after reboot?
One I tried that but for some reason, or strange occurrence, once in a while the engine wouldn't start.What is the safe way?Wait...don't tell me.KILL BILL.I know.But that is not an option.I do not have money to buy bullets(watch Chris Rock comedy show and you'll get it).
And another one.I have looked all over the forum but I haven't found the solve.In both ENS and proxy I found a way to limit access by MAC.But it is not working.Or I am doing something wrong.Cause I know all the MAC's on the network, I have created filters for access if MAC is in the "OK" list, but then I got authentication errors.Is this possible?

PS.I am sory that I'm asking so many in this toopic, but I thought not to spam the main forum with so many little questions.

[Pascal]

One I tried that but for some reason, or strange occurrence, once in a while the engine wouldn't start.What is the safe way?Wait...don't tell me.
And another one.I have looked all over the forum but I haven't found the solve.In both ENS and proxy I found a way to limit access by MAC.But it is not working.Or I am doing something wrong.Cause I know all the MAC's on the network, I have created filters for access if MAC is in the "OK" list, but then I got authentication errors.Is this possible?

1. Reboot should be fine. But why do you need to reboot the server ? Why not just leave it running ?

2. Can you give me a sample of what the MAC you enter looks like ? (Did you do this through a Policy / Filter / Criterion combination ?)

If you use WG DHCP to assign IP addresses, you can use user assumptions by machine name. That way, you authenticate the users and don't need a MAC filter (As a side thought)

[Mendoza]

I input MAC's like this 00-02-44-63-ba-e5
I do not us DHCP.I assign static IP's.
The reason I reboot the server is....well, if I am not at my office for a couple of days, this would shorten the chances for long term internet blackout.
So can MAC auth. be done?

[Pascal]

So can MAC auth. be done?

Should be do-able. It's in the Policies. I'm just wondering if it will only work if WinGate DHCP is used. I'll give it a test tomorrow morning, then let you know.