[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Strange PPPoe problem



On Thursday 23 March 2006 10:58, Jacob S wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>Howdy list,
>
>I recently changed ISPs, away from static ips on a dsl line to a
> single dynamic ip on Veriz*n's new Fi*S (fiber optic) service. The
> new service uses PPPoe - not a problem, or so I thought - I have
> PPPoe on my firewall.
>
>Now, I have used PPPoe from this very same firewall on a different dsl
>line before and it worked great. But for some reason when I do PPPoe
>for the new fiber line only http traffic works properly. When
>downloading e-mail, everything is fine until it tries to download the
>mail (I see it login, get the number of messages to download, and then
>it tries to start downloading). At this point the e-mail just hangs
>until it finally times out. It does not seem to be port-related, as I
>have setup the e-mail server with port-forwarding rules to allow me to
>download mail on non-standard ports and it exhibits the same problem.
>And if I do PPPoe on the provided D-Link router, instead of on my
>firewall, everything (including e-mail) works great.

Then I suggest you use it, as, provided you replace the d-link with a 
linksys, something like a BEFSX41, you'll also have a very good 
firewall for free AND it will all Just Work(TM).  I spent 2 weeks 
trying to make rp's PPPoE for linux work but like you, way too many 
things just didn't work.

The security of the d-link product has been questioned at length on the 
lists, and I can testify that the seimans speedstream product is 
likewise rather poor, it was owned and trashed here inside of 2 weeks, 
with outside config access supposedly denied from the WAN ports.

My linksys has let someone by just far enough to make a log entry as 
they were being dropped by a combination of portsentry, tcpwrappers, 
and iptables, 3 times in 3 years, 2 of which came from known sources 
when one of vz dns servers was owned and attacked me.  The third one 
came from a chinese address block and didn't get any farther that the 
log.  For 3 years of 24/7/365 dsl service, I think  thats very good 
security indeed.

>So, this problem has me stumped. I've tried playing around with the
>PPPoe options in /etc/ppp/peers/dsl-provider, and re-ran pppoeconf a
>couple times, but I can't get around the e-mail freeze. Does anybody
>else know what might cause a problem like this?
>
>TIA,
>Jacob
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.2.2 (GNU/Linux)
>
>iD8DBQFEIsWmkpJ43hY3cTURAsrTAJ4mQR1eLZkyROcapMPQqSmNOJNWygCggb3i
>yKSy9J3jbAWgjv42iZK3UZM=
>=HAUe
>-----END PGP SIGNATURE-----

-- 
Cheers, Gene
People having trouble with vz bouncing email to me should add the word
'online' between the 'verizon', and the dot which bypasses vz's
stupid bounce rules.  I do use spamassassin too. :-)
Yahoo.com and AOL/TW attorneys please note, additions to the above
message by Gene Heskett are:
Copyright 2006 by Maurice Eugene Heskett, all rights reserved.



Reply to: