Topic: Unable to go to internet when SME server is on

[Retlar]

hi

Whenever SME Server is on line i have a hard time getting to the net, it takes too long and times out.
i don't know what i did wrong when setting up SME, as i am very new to SME (Linux).

we have between 80-90 workstations behind SME, nothing happens when i pull all but one workstation off the network. still can't get to the net. there is not much disk activity, all looks normal.
certain workstations did have Bittorrent loaded, but were uninstalled. the network was shut down and restarted again but the problem still persists. SME7Admin and Snort are not installed as far as i can tell.
thinking that a reinstall would fix the problem i reinstalled SME Server 7.1 and than downloaded 7.2 and did an update. however, when i put SME back on line i am still experiencing the same problem

the only way to get online is to shut down SME.

SME is configured in server only mode. it hooks up to a switch than to the router, which goes to the modem than to the net.

i'd really like to install "iptraf" but don't know how to. is there a manual someone can direct me to? i'd like to pinpoint the workstation generating all the traffic.

desperately in need of help

[raem]

Retlar

iptraf is already installed, at the root command prompt type
iptraf

the only way to get online is to shut down SME.
SME is configured in server only mode. it hooks up to a switch than to the router, which goes to the modem than to the net.

It sounds like your network and/or sme server is not configured correctly.
You need to provide far more details of the configuration of each device on your network eg IP numbers, DHCP server, gateway IP address etc etc.

Have you carefully read the manuals ?

http://wiki.contribs.org/Main_Page

[thomasch]

Retlar,

Next time don't open a new topic which is similar as your previous topic.
You are likely will get more help you if you focus on your previous opened topic.

thomas

[cactus]

Retlar,

Next time don't open a new topic which is similar as your previous topic.
You are likely will get more help you if you focus on your previous opened topic.

thomas

Since I could not find the other topic quickly:

Retlar, please provide information and perhaps a schematic drawing of your network, including data like gateway, ipadresses, subnets and so on, so we can try and see if you made a mistake in your network configuration.

Is SME Server providing DHCP? Is it the only host in your network providing DHCP or is ter perhaps another server/router providing DHCP? Normally there can be only one instance handing out IP numbers per subnet.

[Retlar]

I'm sorry if I caused any inconvenience.

Alright,
SME is not configured to provide DHCP, currently all workstations (80 to 85) behind SME are using static IP Addressing. We do have two other servers but they are for file sharing purposes only, they do not provide any services to the network. It sits behind a Neatgear Router which has it's firewall enabled.
SME is setup in 'server only' mode, with a static IP Address (ranges from 192.168.10.1 - 192.168.10.255) with a subnet of 255.255.255.0, DHCP is disabled. Only one ethernet adapter is used, it connects to a 3Com switch and from there to the Netgear Router, which is the gateway.
SME is not used to host websites, intranet, etc...it is used only for emails.


Hope this info is helpful (had a hard time uploading image of network, so didn't post it)

[raem]

Retlar

So is your sme servers IP 192.168.10.1  ?

What is your routers IP & subnet ?

What are your workstation settings ?
ie what is the gateway IP & DNS server on each workstation ?
do
ipconfig
or
ipconfig /all
at a DOS prompt

Did you set sme server to use the router gateway IP for internet access  ie in Configure this server screens ?

From a workstation DOS prompt can you ping the sme server by IP and can you ping the router by IP, when they are both on, and/or under what conditions of power on or off ?
eg
ping smeIP = ping 192.168.10.1
ping routerIP = ping 192.168.?.?

Did you set the sme server and workstations to be members of the same workgroup ?

What the the settings in workstations and sme server for DNS server ?

[Retlar]

Ray,

No, SME's IP is 192.168.10.3. The routers IP is 192.168.10.1, subnet 255.255.255.252.

The gateway IP for each workstation on the network is 192.168.10.1, which is the routers IP, and DNS is 202.5.191.130 primary and 202.5.191.160 secondary.

Yes SME is configured to use the Router IP as the gateway to the net.

Yes from my workstation I can ping SME and the Router both by IP and Name.

Yes SME and workstations are configured to be members of the same workgroup.

[raem]

Retlar

SME is setup in 'server only' mode, with a static IP Address (ranges from 192.168.10.1 - 192.168.10.255) with a subnet of 255.255.255.0

No, SME's IP is 192.168.10.3. The routers IP is 192.168.10.1, subnet 255.255.255.252.

Shouldn't your subnet be the same ?

[thomasch]

What 'iptraf' show you?

Does 'ifconfig' show any error/collision/dropped packet?

Are you sure this is not a jerky half dead ethernet card/NIC problem?

Maybe ethernet cable error?

I will suggest you to try this :
- Use your smeserver installation cd, boot your smeserver in rescue mode, accept/yes to init your network devices.
No DHCP, use IP 192.168.10.3, subnet 255.255.255.0
If the problem persist, then I suspect it is a NIC problem.

thomas

[JoshuaR]

edit: read that wrong

[Retlar]

Thank you all for your help and advice. I am very grateful.

SME Server is up and running perfectly!!!! And I must say, it is the greatest!

thank you again.

[raem]

Retlar

So we can all benefit from your experience, would you let us know what the problem was, how you found it and what you did to fix it.
Thanks

[Retlar]

Three workstations on the network were infected by two worms, Stration worm and Storm worm.
After doing a google search I found out that these two worms were generating spam like crazy and sending them out via SME using our domain name, thus using up all bandwidth.

NOD32 anti-virus picked them up but did nothing to remove them from the system, I installed AVG Free, updated it and did a scan. When AVG Free picked them up NOD32 also picked them up and instead of AVG removing them from the workstation NOD32 did. I broke up the network into segments, isolating workstations from the rest and started scanning. When I was sure that no other system was infected I pulled the network backup and put SME back online. However, we were still experiencing the same problem!
Than I remembered that I had backed up SME Server 7.1 before updating to SME Server 7.2 than did a restore after the upgrade was complete. And maybe I restored all the spam sitting in the out box. So I did a reinstall of SME Server and now every thing seems to be running well.

[NickCritten]

Ouch.

You may find that your IP address has now been blacklisted, so if you now have trouble sending emails directly - you know the issue.

[ask_jeeeves]

Ouch.
You may find that your IP address has now been blacklisted,

These may be of help to check if it has been blacklisted or not:

http://cbl.abuseat.org/lookup.cgi
or
http://www.spamhaus.org/index.lasso
or
http://openrbl.org/client/

Regards, Rob