From owner-freebsd-questions@FreeBSD.ORG Tue May 6 04:38:31 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2CB8B37B401 for ; Tue, 6 May 2003 04:38:31 -0700 (PDT) Received: from gwdu60.gwdg.de (gwdu60.gwdg.de [134.76.98.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id E3DD343F75 for ; Tue, 6 May 2003 04:38:29 -0700 (PDT) (envelope-from kheuer2@gwdg.de) Received: from gwdu60.gwdg.de (localhost [127.0.0.1]) by gwdu60.gwdg.de (8.12.8p1/8.12.4) with ESMTP id h46BcIij027284; Tue, 6 May 2003 13:38:18 +0200 (CEST) (envelope-from kheuer2@gwdg.de) Received: from localhost (kheuer2@localhost)h46BcGRo027281; Tue, 6 May 2003 13:38:18 +0200 (CEST) X-Authentication-Warning: gwdu60.gwdg.de: kheuer2 owned process doing -bs Date: Tue, 6 May 2003 13:38:16 +0200 (CEST) From: Konrad Heuer To: Wayne Swart In-Reply-To: <20030506130814.P2858-100000@gemini.fixx.co.za> Message-ID: <20030506133409.X89463-100000@gwdu60.gwdg.de> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: FreeBSD Mailing list Subject: Re: What trigers PPP? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 May 2003 11:38:31 -0000 On Tue, 6 May 2003, Wayne Swart wrote: > We have a dial on demand server at a client. Running FreeBSD4.7-RELEASE. > The server act as a gateway and has squid and samba running on it. > > Ony certain ppl on the lan are allowed access to the squid, but all the > netbios. > > Something triggers the ppp on this box and I can't find what exactly it > is. > > All the gateway and DNS settings have been removed from all the client > pc's on the lan (running windows 2000 prof. (if that helps)). That caused > the ppp to kick in everytime someone made even a netbios request through > the server. > > Now we have removed all of them, but the ppp still kicks in every now and > then (more often than what is specified in crontab). > I took a look at the tcpdump logs as well, and that shows only netbios > requests from the inside to other boxes on the inside, nothing goes out > via tun0, according to tcpdump, is there anything else i can look for? Maybe you should look for tcp connections still being open on the box via "netstat -n"? >From time to time I observed a similar behavior which was caused tcp "keep alive" requests from the box to outer world because some connections still were unclosed. Regards Konrad Heuer (kheuer2@gwdg.de) ____ ___ _______ GWDG / __/______ ___ / _ )/ __/ _ \ Am Fassberg / _// __/ -_) -_) _ |\ \/ // / 37077 Goettingen /_/ /_/ \__/\__/____/___/____/ Germany