Networker

[Networker] SUMMARY: firewall timing out client inactive.

2003-01-19 03:55:28
Subject: [Networker] SUMMARY: firewall timing out client inactive.
From: Gary Goldberg <og AT DIGIMARK DOT NET>
To: NETWORKER AT LISTMAIL.TEMPLE DOT EDU
Date: Sun, 19 Jan 2003 03:50:59 -0500
Thanks to the many people who replied. I had said:

> Problem 1:  Some of my clients are running and then
> failing with the message
> "client:/disk has been inactive for 30 minutes since
> {timestamp}"
> "client:/disk is being abandoned by nsrexec."

(Further diagnostics included the SonicWALL firewalls I
had deployed between the clients and the NT4 nsrserverhost.)

(I also found these errors in the client's daemon.log:)

12/28/02 01:34:11 nsrexecd: failed to write NUL handshake on 8: errno 32, 
Broken pipe
12/28/02 03:53:27 nsrexecd: failed to write NUL handshake on 8: errno 32, 
Broken pipe
12/29/02 01:33:44 nsrexecd: failed to write NUL handshake on 8: errno 32, 
Broken pipe
12/29/02 03:52:47 nsrexecd: failed to write NUL handshake on 8: errno 32, 
Broken pipe
12/29/02 08:02:13 nsrexecd: failed to write NUL handshake on 8: errno 32, 
Broken pipe
12/29/02 10:23:07 nsrexecd: failed to write NUL handshake on 8: errno 32, 
Broken pipe
12/29/02 13:18:10 nsrexecd: failed to write NUL handshake on 8: errno 32, 
Broken pipe
12/30/02 00:51:31 nsrexecd: failed to write NUL handshake on 8: errno 32, 
Broken pipe

In addition to the fine tuning necessary in the firewalls (proper
range of ports, setting network timeouts for each access rule to
999, updating the firewalls to the latest version of the firmware)

Several people suggested turning on "verbose" mode in the group
definition to increase the chatter going back and forth between
client and server. Once done, this appears to have resolved the
problem. Thanks again. -Gary


-- "We don't see things as they are, we see them as we are." - Anais Nin
Gary Goldberg KA3ZYW <og AT digimark DOT net> V:301/249-6501 F:301/390-1955 
AIM:OgGreeb
Digital Marketing/Bowie MD/Systems & Networks Consult <http://www.digimark.net/>

--
Note: To sign off this list, send a "signoff networker" command via email
to listserv AT listmail.temple DOT edu or visit the list's Web site at
http://listmail.temple.edu/archives/networker.html where you can
also view and post messages to the list.
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=

<Prev in Thread] Current Thread [Next in Thread>
  • [Networker] SUMMARY: firewall timing out client inactive., Gary Goldberg <=