steveo3782
join:2003-07-21
North Richland Hills, TX
| reply to Shootist
Re: ZyWall 2 - Firmware WK.12 released
I'll try to get Wallwatcher installed tonight and see what's going on.
I have a webcam set up in the backyard to watch the dogs, it runs 24x7, FTP server, just for convienence sake, and it runs 24x7, a web server to host pictures for a fraternal organization that I belong to, and two desktop computers that we leave on 24x7. The logs are full of blocked probes that appear to be trojans or backdoors, from the incoming port numbers and my little bit of research, also, someone is broadcasting netbios, which is also blocked. The logs fill up in about 1.5-2 hours normally. And no, I'm not getting up any earlier.(now you sound like my wife) 
I don't think power surges or spikes are a problem, because nothing else goes off or resets. I don't have it on a UPS, but I do have it on a good surge protector. If need be I can pick up a UPS, but I just don't think power is the problem right now. It sits next to a Linksys WRT54G that is set up as a WAP, and it doesn't reset. There is also a Buffalo NAS server that will not restart on its own, and it hasn't been down either.
Oh well, I'll get to work on that logger tonight.
Thanks again, I'll let you know what I find.
Steve |
|
steveo3782
join:2003-07-21
North Richland Hills, TX | 10:30 AM, another reboot. Definately gotta get some external logging, every time it reboots it wipes out the logs. |
|
Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON | Have you reset to defaults and reconfigured from scratch when upgrading to WK.12? |
|
steveo3782
join:2003-07-21
North Richland Hills, TX | Yep, reset, re-configured, had about a little better than 4 days straight uptime, then we started this. Oh well I need a project anyway  |
|
Shootist
Premium
join:2003-02-10
Decatur, GA | Is the router rebooting or are you just losing your internet connect.
--
Shooter Ready--Stand By BEEP ******** |
|
steveo3782
join:2003-07-21
North Richland Hills, TX | Router reboots. |
|
Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON | If the router is rebooting then connect a serial terminal via RS323 to the router and turn on logging to file.
Every time router reboots there's a dump file that you need to capture and send to ZyXel. |
|
steveo3782
join:2003-07-21
North Richland Hills, TX | Hmm, something new to learn. I have a serial cable, I believe, at home. Does this enable some other logging than, say, Wallwatcher or the like? Thanks again for all the help. |
|
Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON | Use the serial cable that was included with your router.
Set the conn parameters to 8-N-1, turn on logging to file and let it be for day or two so you capture the dump during reboot. |
|
steveo3782
join:2003-07-21
North Richland Hills, TX
| OK, I've hooked up the serial cable, and logged in. Looks just like the telnet screen. I need a hint on where to turn on logging to file. Is it from the CI, or is it a menu option that I've just missed. I'm really impressed with the flexibility of the ZyWall, but damn, the learning curve is tough.
Thanks again
Steve |
|
Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON | Depends whatever terminal you're using. Look in the menus. I prefer TeraTerm but HyperTerm must have some logging too. |
|
steveo3782
join:2003-07-21
North Richland Hills, TX | Ok, I'm a bit confused here. Do I just connect via terminal, or do I log in, or connect , log in, and do something else? |
|
Brano
I hate Vogons
Premium,MVM
join:2002-06-25
Burlington, ON | Just connect so you get the login prompt and you can leave it there. The crash log will be dumped just to that window. |
|
steveo3782
join:2003-07-21
North Richland Hills, TX
1 edit | OK, I'm there! It's set to capture the screen to file. Let's see what happens now. It's rebooted 4 time today. It will probably not reboot for days now that we're watching it, kinda like watching water boil.
Thanks again for your help, and I'll let you know what comes of it.
Steve
Edit: I spoke too soon, just rebooted... |
|
