Index  | Recent Threads  | Unanswered Threads  | Who's Active  | Guidelines  | Search
 

Quick Go »
No member browsing this thread
Thread Status: Active
Total posts in this thread: 7
[ Jump to Last Post ]
Post new Thread
Author
Previous Thread This topic has been viewed 966 times and has 6 replies Next Thread
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
confused Dealing with Firewalls - help!

I have most of my machines stuck behind a firewall that needs constant validation from each server in order for the agents to send/receive work units. The window stays open 24 hrs at most.

I have no control over the firewall and security policy prevents me from simply running wget with user/passwd. My UD and Boinc device profiles are default - always run, always network.

Anyone have a situation like this?

I lose a lot of potential calculation time due to this. These machines usually do not have much to do.
[Sep 15, 2006 8:14:30 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
confused Re: Dealing with Firewalls - help!

Hello hechlerg,
I assume that this is a corporate firewall. If so, your best bet might be to request help from your sysadmin.

Lawrence
[Sep 15, 2006 10:25:21 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Dealing with Firewalls - help!

so would it be better to have a profile that allowed the machines to download a weeks worth of WU's at a time ? then once a week upload results and download new WU's ?
that is possible isnt it ?
[Sep 16, 2006 3:42:01 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Dealing with Firewalls - help!

Hi urban peasant,
That sounds like a good workaround. Probably better to set the communication interval at half a week (84 hours) to avoid time outs on the work units.
Lawrence
[Sep 16, 2006 3:48:30 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Sekerob
Ace Cruncher
Joined: Jul 24, 2005
Post Count: 20043
Status: Offline
Reply to this Post  Reply with Quote 
Re: Dealing with Firewalls - help!

unfortunately, u dont get more than the max of 10 at the time (if u'r lucky), so the whole weekly contact thing went out my window a while back. Even if setting it to FAAH only, the longest once, it's done in less than 3 days.

Trick to get more is to suspend all the WU's and replicate......WCG sends u more. Dont know if there is a limit on how many it would send in a day without returning any.....think someone ran into the 120 wall a few weeks ago that knreed took down....but think its conditional.
----------------------------------------
WCG Global & Research > Make Proposal Help: Start Here!
Please help to make the Forums an enjoyable experience for All!
[Sep 16, 2006 4:00:53 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Dealing with Firewalls - help!

I have most of my machines stuck behind a firewall that needs constant validation from each server in order for the agents to send/receive work units. The window stays open 24 hrs at most.

I have no control over the firewall and security policy prevents me from simply running wget with user/passwd. My UD and Boinc device profiles are default - always run, always network.

Anyone have a situation like this?

I lose a lot of potential calculation time due to this. These machines usually do not have much to do.


Hello,

I also have some PCs behind a firewall but I have no problem.

Please explain us what is the problem:

- is firewall open only during some hours each day?

- is open to outbound traffic?

- do you know which is the firewall name? ISA Server? Hw one?

- can you check your IE proxy settings? maybe it can help

please give us more details.

Regards.
[Sep 19, 2006 10:16:50 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Dealing with Firewalls - help!

Yes- this is a corporate firewall... and very strict ones. Not sure if they are Cisco appliances... cannot remember and I do not have access to see. They clamp things down so tight our own monitoring software has trouble talking to the agents through the firewall. They are extremely paranoid and do not like to leave ports open (in or out), so usually a server gets about 24 hours before re-authentication is required. Authentication is a manual process using a browser, which creates wonderful issues for my headless linux servers running BOINC. Plus, they bounce the firewalls which means you have to re-authenticate even if you did just an hour ago.

I have tried using wget running randomly on each host to keep the firewall open for the host but then the password is exposed and that is bad and it doesn't work very often anyway.

One or two hosts would not be a problem but I have 20+ behind this firewall and it is a big pain in the buttocks to stay on top of them for this silly little issue.
[Sep 24, 2006 9:52:32 PM]   Link   Report threatening or abusive post: please login first  Go to top 
[ Jump to Last Post ]
Post new Thread