PDA

View Full Version : Conflict: Nod32 & Aventail Connect 4.12 (2)


acue
October 26th, 2006, 04:39 AM
The original thread (http://www.wilderssecurity.com/showthread.php?t=102689) is very old, so I create this one.
I have found the reason and the decision.

After installing Aventail and Nod32 I'v got the following important LSP chains:
1. Aventail AutoSocks LSP over MSAFD Tcpip [UDP/IP]:
chains 2 elements: > AutoSocks LSP Dummy Entry > MSAFD Tcpip [UDP/IP]
2. Aventail AutoSocks LSP over MSAFD Tcpip [TCP/IP]:
chains 2 elements: > AutoSocks LSP Dummy Entry > MSAFD Tcpip [TCP/IP]
3. NOD32 protected [Aventail AutoSocks LSP over MSAFD Tcpip [UDP/IP]]:
chains 3 elements: > NOD32 > Aventail AutoSocks LSP over MSAFD Tcpip [UDP/IP] > MSAFD Tcpip [UDP/IP]
4. NOD32 protected [Aventail AutoSocks LSP over MSAFD Tcpip [TCP/IP]]:
chains 3 elements: > NOD32 > Aventail AutoSocks LSP over MSAFD Tcpip [UDP/IP] > MSAFD Tcpip [TCP/IP]

The system is not working such a way. I'v corrected 3 and 4:
3. NOD32 protected [Aventail AutoSocks LSP over MSAFD Tcpip [UDP/IP]]:
chains 4 elements: > NOD32 > Aventail AutoSocks LSP over MSAFD Tcpip [UDP/IP] > AutoSocks LSP Dummy Entry > MSAFD Tcpip [UDP/IP]
4. NOD32 protected [Aventail AutoSocks LSP over MSAFD Tcpip [TCP/IP]]:
chains 4 elements: > NOD32 > Aventail AutoSocks LSP over MSAFD Tcpip [UDP/IP] > AutoSocks LSP Dummy Entry > MSAFD Tcpip [TCP/IP]
This variant works fine!

Conclusion: it seems nod32 imon have a bug at algorithm assigned for installing it in winsocks when there is another LSP elements.

acue
October 31st, 2006, 03:47 AM
Are there any comments from developers?

Sorry, for flood.

Marcos
October 31st, 2006, 04:03 AM
IMON was designed to work properly with any LSP, it can receive data and forward it to the next LSP fine. Unfortunately, often the other LSPs are not designed to work in conjunction with the others and do not forward the data as supposed.

acue
October 31st, 2006, 06:44 AM
Yes, IMON is working properly with Aventail LSP too, but only after I'v manually corrected a chain created by NOD.

Don't you see that NOD is responsible for building wrong LSP chain at the example?
Or do you think that Aventail LSP has incorrect or missing parameters that prevent NOD from making well-working LSP chain?