SECTION P - MISCELLANEOUS

1. Under heavy load, the squid and/or publogwww services seem to stop working for 10 minutes, while all other services still work correctly.

   Log in to the firewall as 'root' and check for the word looping in the logs by typing: 'grep looping /log/all'.
   If you see a 'cdsinetd looping', then attempts were made at accessing that particular more times than the allowed maximum. cdsinetd then turns the service off for 10 minutes.
   To fix this, go into the 'System Setup' in fwadmin (this cannot be done via remadmin) and up the rate to some larger number.

    

   
   
2. How do I use Standard Bank's Business Internet Banking system from behind the firewall?

   If your web access is via transparent gateways, simply add TCP gateways for ports 15000 through 15015.
   If your web access is via the Squid caching proxy, perform the following steps:

   1. Make sure that the PCs and all the routers have their default routes (default gateway on Microsoft operating systems) pointing in the right directions. You can test that you've got this right, by enabling (temporarily) traceroute and icmp (in the gateways setup screen) and then tracerouting (command: tracert on Microsoft operating systems) to the standardbank site. If this doesn't work, then there is a routing problem.
   2. Have TCP proxies for the services that you want to go via squid, and add TCP gateways for ports 15000 through 15015.
   3. Configure the proxy settings on the browser. Configure the proxy server and port for the services that go through Squid (these will match exactly the TCP proxy settings), and make sure that the toggle 'Use the same proxy server for all protocols' is NOT checked.

    

    

    

   
   The End.