This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection lost when downloading file from specific FTP (weird!)

Hello,

I have a very, very weird problem:

When I download a large file from a specific FTP, my uplink is lost after some minutes.
(when I download the same file from another FTP with the same speed, this problem doesn't occur! ???)
When I get the error, UTM reports "State: Up" and "Uplink: Error". My modem (connected via Ethernet) shows a normal connection (all LEDs are lit normally).

When I then do nothing, the connection will come back after 5 to 20 minutes.

While I'm disconnected, I can see DHCPACKs in the system log, but not a single server from outside can be reached.

When I restart the firewall, the time for a comeback of the line seems to be the same.
When I restart my modem, I have a connection after the modem's initialization.

This led me to the conclusion that the problem must lie beyond my firewall.

I then contacted my ISP and they observed my modem while I forced the disconnect with the download.

The interesting thing was: I phoned over IP. When I lost the connection, I could hear my ISP for a minute or so but he couldn't hear me. So packets seem to reach me, but no packet could be sent.
And: While I was disconnected, my ISP could call the webinterface of my modem normally and could ping servers from there, while I was unable to ping any server from my UTM.

So now the conclusion seems to be, that the problem is on my UTM. What the heck is going on here? :-)
I found this thread and I had hopes, but the ethtool call didn't help: https://community.sophos.com/products/unified-threat-management/f/hardware-installation-up2date-licensing/30148/9-312-intel-82572ei-e1000e-hardware-unit-hang

I cannot tell it exactly and it is maybe coincidence, but maybe the problems began when updating my UTM from 9.504-1 to 9.605-1.
I have a single internet line with no load balancing.

Thanks in advance for any help.
This problem is driving me mad.



This thread was automatically locked due to age.
Parents
  • If FTP is public, please post the URL.

    Do you phone from inside LAN or phone connected to ISP-Router?

    try to ping 8.8.8.8  all the time while downloading and connection is broken. -- result ?

    try to ping 8.8.8.8 from SG (Support / tool) while connection is broken.

    If you have a ISP-router with multiple LAN-ports, connect a PC/Notebook and try to access internet while connection is broken.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • I did your last suggestion and the notebook was also disconnected. So the modem seemed to be the culprit.

    But: I phoned my ISP and they changed my modem to another model from another manufacturer, but the problem is still there!?

    The only difference is now that the disconnect lasts only a few seconds (2 to 3 seconds). The new modem seems to reset something much more faster than the old modem.

    When the short disconnect happens, I can see this in the system log of the UTM:

    2019:09:20-16:33:51 home ntpd[1145]: Deleting interface #19 eth0, 192.168.xxx.xxx#123, interface stats: received=0, sent=0, dropped=0, active_time=155 secs
    2019:09:20-16:33:51 home ntpd[1145]: Deleting interface #20 eth0, xxxx::xxx:xxxx:xxxx:7a44%2#123, interface stats: received=0, sent=0, dropped=0, active_time=155 secs
    2019:09:20-16:33:53 home ntpd[1145]: Listen normally on 21 eth0 192.168.xxx.xxx:123
    2019:09:20-16:33:53 home ntpd[1145]: Listen normally on 22 eth0 [xxxx::xxx:xxxx:xxxx:7a44%2]:123
    2019:09:20-16:33:53 home ntpd[1145]: new interface(s) found: waking up resolver

    With this new facts I would say that the problem is in my UTM.

    Is there something I can do to test it further?

  • by the way: eth0 is my internal LAN. I wonder why the UTM is deleting the internal interface eth0 for a short moment...?

    Currently I would bet that the bug is in the network driver of the UTM, because my UTM setup hasn't changed in years and in the past I downloaded many large files from this FTP without any problem.

    Some more info about my UTM: CPU is always at 5% to 15%, RAM always around 30%. Log disk 1%, Data disk 11%.

    Currently only the firewall and the network visibility are enabled.

Reply
  • by the way: eth0 is my internal LAN. I wonder why the UTM is deleting the internal interface eth0 for a short moment...?

    Currently I would bet that the bug is in the network driver of the UTM, because my UTM setup hasn't changed in years and in the past I downloaded many large files from this FTP without any problem.

    Some more info about my UTM: CPU is always at 5% to 15%, RAM always around 30%. Log disk 1%, Data disk 11%.

    Currently only the firewall and the network visibility are enabled.

Children
No Data