Dsl connection stays down
-
that is weird. is the dsl PPPoE? if so, make sure that 'dial on demand' is not set for the WAN interface.
-
thats all pf supports. qwest will do a or e. dial on demand is enabled.
edit:
qwest prefers a but i am using pf so i am using e. has worked with 1.2.2. didnt start until upgrade to 1.2.3, i thought it was hardware so i replaced all the nics, still problam stays -
i'm sorry, i can't even tell what you are saying :(
-
ppoe = e
ppoa = asorry for the confusion
-
Like I asked, did you disable dial on demand?
-
sorry didnt see that, no but i will and will let you know.
how would that affect it? isnt dial on demand supposed to be enabled if you want the Internet "always on"? -
no, you have it backwards. "on demand" means "only bring it up if there is traffic".
-
so essentially the vpn does not create the traffic that would keep the connection up?
I will make sure its disabled and get back to you when i have made the change, wont be able to do it for a day or two though. -
well, maybe. do you have the vpn setup to send keepalive packets? if not, try that. then again, you could just disable the option :)
-
vpn is set up to do the keep alive.
I will try to disable it and see what happens. -
I disabled it and still have a problem, turns out snort is whats causing the problem, it is blocking the wan ip of the local box, so that nothing can go out the wan connection unless i unblock it from snort… will try using an fqdn (since my ips are dynamic) to see if it fixes the problem
-
glad you figured that out. i'm not surprised, i gave up on snort a couple of years ago after similar false positive fiascos :(
-
it is too bad, do you know if the whitelist works with fqdns?
I have left the dial on demand disabled in case it was part of the problem. -
Not sure if you are talking to me. If so, I have no idea, since I have been burned twice with snort.
-
i was since you were the only one helping me. Its burned you twice huh, doesnt sound too good.
I still think this is related to my upgrade as it didnt do this on 1.2.2, I will ask it on the snort board.Thanks for your help at least the connectivity issue is solved, if i cant use snort im not going to worry as it isnt critial to me.