Re: "connection timed out" problem
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: "connection timed out" problem

From: Skywise <into@oblivion.nothing.com>
Date: Sun Apr 02 2006 - 06:13:56 CEST

Sebastian Gottschalk <seppi@seppig.de> wrote in news:498r39FnmdujU1
@news.dfncis.de:

> Skywise wrote:
>
>> I just uninstalled the firewall and risked going online without it.
>
> Why should that be a risk?
>
> Better said: If your security depends on that packet filter, your
> concept has a bring problem that cannot be solved by that packet filter.
> Host security is important as well.
>
>> No change. So at least in my case, the PFW is not the problem.
>
> Did you check whether the driver was actually uninstalled? I've seen
> these uninstallers fail too often.

I can retry the test and check for that.

>> Next idea?
>
> At least you can exclude this common source of error now.
>
> Next checks:
> - flushing the dnscache (ipconfig /flushdns)
> - net stop DnsCache & net start DnsCache

These didn't seem to have any effect.

> - did you change some of the values in
> HKLM\SYSTEM\CCS\Services\TcpIp\Parameters by a tuning tool or alike?

No tuning tools. But one thing I ran across while trying to solve
this problem was to add the DWORD "MTU" (maximum transmission unit)
and set it to 576 as recommended for dial up connections. ISTR
needing to do this some years ago on a previous computer. But, it
didn't have any effect on my current problem.

In searching for info on this key's definition, I've run across
some other interesting keys that may be relevant. From the info
I'm finding on the MS knowledge base, it appears these keys are
not at their default values, or missing altogether. Specifically,

under HKLM\SYSTEM\CCS\Services\TcpIp\Parameters
TcpMaxConnectRetransmissions is set to 0, default is 2
TcpMaxDataRetransmissions is missing
InitialRtt is also missing

under HKLM\SYSTEM\CCS\Services\TcpIp\Parameters\Interfaces\{id}
TCPInitialRtt is missing

Are you familiar with any of these?

Oh, and in case it's important, this is a W2KPro SP4 setup.

> - does netstat or TcpView omit something about how long Windows is
> waiting for the DNS reply?

I've just downloaded TCPView....what exactly should I be looking
for?

BTW, thanks for the help. I actually enjoy this kind of trouleshooting
as I always learn something new. And I'm one of those who learns
by "I wonder what would happen if I...." :)

Brian

-- 
http://www.skywise711.com - Lasers, Seismology, Astronomy, Skepticism
Seismic FAQ: http://www.skywise711.com/SeismicFAQ/SeismicFAQ.html
Quake "predictions": http://www.skywise711.com/quakes/EQDB/index.html
Sed quis custodiet ipsos Custodes?
Received on Mon May 1 01:04:07 2006