Firewall or Network Issues?

[Brangwyn]

I've been doing a bit of work for a customer the last hour or so and there seems to be a few times where the PIX's or something seem to be very unresponsive for a few minutes and then come right again, anything known going on ?

On the status monitor right now "google.com" is showing orange so I'm assuming theres some issues in both directions?

[jetzkr8]

All my sites are effected

[Brangwyn]

I've been talking with Dave in a TT, basically its this Universal Cisco Exploit thats causing the problem, the firewalls been rebooted as they had bogged down completely and they seem to be running OK now. Last word from Dave was they're trying to get the IP's that are hitting the network with the exploit blocked upstream.

Things definitely seem more stable for me now, not always fast like usual but definitely improving.

[bigdave]

Looks like James has got it nailed down by routing traffic directly to the PIX into the network then blocking it there, basically creating a black hole for anything going to it. We seem very stable now.... YAY!

[bigdave]

Oh and Universal Cisco Exploit is a theory still, I'm not 100% on that one....

[Brangwyn]

Great stuff guys

[Vixen]

Whatever it is needs be fixed because being woke up at 4:22am kinda sucks.

[mresell]

Originally Posted by Vixen

Whatever it is needs be fixed because being woke up at 4:22am kinda sucks.

I feel you pain. I remember when I substituted for 2 counties. Whichever called first was where I went. For a yr and a half...sleep was worse than usual. Not that it has ever been great(crazy schedules)...welcome to the 21st century. No sleep required.

[Brangwyn]

Whatever it is needs be fixed because being woke up at 4:22am kinda sucks.

Sleeps really overrated anyway

I proposed an alternate fix to Dave in my TT, not sure how well it will sit with Alex though ... involved the insertion of CAT5 into orifices which will go unnamed and having Alex manually route the traffic himself

[admin]

I think James fixed the pix today they were still trying to use the new cisco hole..

But I still have some plans in the works for some network upgrades that need to be done to take the new cogent link anyway. We will be full gige once this change is done and should make EVERY thing faster.

I think the pix's will be fine if it was indeed the cisco hole that caused them to fail. Only time can tell on that one

[admin]

Well 24 hours still good..


I think we kicked those little script kiddies butts.. But still going to give it a little more time to be 10000000% sure before I can the 2 pix firewalls.