Firewall-1

Re: [FW-1] Outlook is sometimes so slow

Subject: Re: [FW-1] Outlook is sometimes so slow
From: Nico De Ranter <nico AT SONYCOM DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Sat, 31 May 2003 15:16:04 +0200
I noticed Outlook has the very bad habbit of setting up a TCP connection
to the Excanahge server and then not sending anything over that connection
for the next couple of hours. The next time you try to do something the
firewall will have timed out the idle TCP connection and will refuse any
more packets for it (look for something like 'tcp packet out of state'
in the log files). The Outlook client will keep on trying a few times
until it times out and reestablishes a connection.  You can raise the
TCP timeout values for the firewall but that's a pretty dirty solution
:-(. Would be a lot easier if they either send some keepalive packets
every few minutes or used a new tcp connection every once in a while.
(probably some environmentalists inside Microsoft that believe throwing
away a TCP connection before it's fully used is bad thing :-)

Nico

>Hello guys,
>
>
>I sometimes encounter that OUTLOOK is so slow.
>I mean when I try to send email or use address book,
>it takes 30 sec. to do so.
>
>---------------------------------------------
>FW-1: NG Feature Pack 3 Build 53225
>OS: 3.6-FCS4 releng 1061  08.28.2002-001900 i386
>Exchange Server  5.5
>---------------------------------------------
>
>The rule, to access to the Exchange server is
>
>MSExchange(DCE:MSExchangeDirRef/ MSExchangeDSNSPI/ MSExchangeIS)/
>NBT(UDP:nbdatagram/ nbname, TCP:nbsession)/TCP135 and TCP over 1024,
>services are allowed.
>
>Do I need to add more service to clear the issue?
>
>Thank you in advance
>Nobu
>"This communication is intended solely for the addressee and is confidential 
>and not for third party unauthorized distribution."
>
---------------------------------------------------------
 "It has been said that there are only two businesses that
  refer to customers as users: illegal drug trade and
               the computer industry."
---------------------------------------------------------
Nico De Ranter
Senior System Administrator
Sony Service Center (NSCE/VPE-B)
Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
1130 Brussel (Bruxelles), Belgium, Europe, Earth
Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
e-mail: nico.deranter AT sonycom DOT com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>