Great Circle Associates Firewalls
(May 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: TIS gateways not observing timeout
From: Frederick M Avolio <avolio @ tis . com>
Date: Fri, 27 May 94 09:28:40 -0400
To: ianh @ resmel . bhp . com . au (Ian Hoyle)
Cc: firewalls @ greatcircle . com
In-reply-to: Your message of Fri, 27 May 94 14:37:25 +1000. <aa0b28a009021014be6c @ [134 . 18 . 1 . 150]>

I'm not enforcing policy here, since it is not my job. Let me suggest
that TIS Firewall specific questions might be better stated to a
smaller audience such as the list specific to the TIS Firewall
(requests to fwall-users-request @
 tis .
 com, list is
fwall-users @
 tis .
 com).

Fred


> Hi,
> 
> I've been using v1.2 (and the newer 1.3 beta) of the TIS ftp-gw on my SGI
> gateway host for several weeks now and have noticed that I can have many
> ftp-gw processes running that are several days old. Right now I have
> 20 of them and while they are relatively "lightweight", they do still
> consume resources.
> 
> I have a "timeout  3600" in my netperms file, but I'm still getting lots
> of these things hanging around, obviously _long_ after any real data has
> passed through them. Should they be dying off ??
> 
> Marcus Ranum (the toolkit's author) says so:
> 
> >        They *should* be, yes. Basically the timeout value is passed to
> >select (for all descriptors) so complete inactivity on all of them, for
> >the time stated in the timeout, should cause the program to exit.
> 
> So, has anyone else seen this problem at all?? Is it a possible problem
> with the use of select() under Irix 5.x ??
> 
>         ian
> 
> PS this is under Irix 5.1.1.3 on an Indy.
> 
> 
> ---
>            : Ian Hoyle,  Senior Research Scientist
>    /\/\    : BHP Research
>   / / /\   : 245 Wellington Rd, Mulgrave, 3170, AUSTRALIA
>  / / /  \  : Phone    +61-3-560-7066
> / / / /\ \ : E-mail   ianh @
 resmel .
 bhp .
 com .
 au
> \ \/ / / / : "Now I've got the bead on you with MY disintegrating gun.
>  \  / / /  :  And when it disintegrates, brother it disintegrates. (pulls
>   \/\/\/   :   trigger). Well, what do you know, it disintegrated."
>            :      -- Duck Dodgers in the 24th and a half century
> 


References:
Indexed By Date Previous: Re: virus checking utilities
From: "Michael S. Hines" <MSHINES @ freh-02 . adpc . purdue . edu>
Next: SNK checksum generation
From: lacoursj @ uprc . com (Jeffrey D. LaCoursiere)
Indexed By Thread Previous: TIS gateways not observing timeout
From: ianh @ resmel . bhp . com . au (Ian Hoyle)
Next: SNK checksum generation
From: lacoursj @ uprc . com (Jeffrey D. LaCoursiere)

Google
 
Search Internet Search www.greatcircle.com