Windows Update

Hey Defenestration

As I had promised, I will release the newer version, just waiting for time to permit.
I had managed to get % of my Rule-set guide up on my forum this morning, so I’m getting ready for the big moment.

 

OK, ensure you re-Activate the 'Internet filtering' (to be protected), so basically from what I'm seeing here is, the ICMP blockings due to large MTU size usage... Try making the adjustments on the Router as I have mentioned

 

I agree Climenole, things should be kept simple, but the WU issues originated with use of EnhancedRulesSet and not my rule-set, however the problems regarding connecting issues with the usage of my rule-set due to not being configured for DNS info, and things were complex because my Rule-set guide had went down with my last site (which were giving freely for me to use at the time) which meant no guidance from me = problems. However, nothing is entirely simple in this world, and more simple things are the more disadvantages we have.

 

Here are my Enhanced Rules....

 

...and here are my Phant0m rules...

 

Hey Neggy

Let work with the pre-bundled rule-set 'EnhancedRulesSet'.

http://www.snakeyez.us/images/BBR/MTU.jpg

Locate this setting on the Router and make the modification I mentioned.

 

I can't see anything on my router about MTU.

It does say Ecapsulation is PPPoA (PPP over ATM)

My menu options in Netgear are:
Basic Settings
ADSL Settings
Wireless Settings
Logs
Block Sites
Firewall Rules
Services
Schedule
E-Mail
Router Status
Attached Devices
Backup Settings
Set Password
Diagnostics
Router Upgrade
WAN Setup
Dynamic DNS
LAN IP Setup
Remote Management
Static Routes
UPnP

I don't see how changing anything with my router setting will help as I still get the same results with WU when I connecct via a GPRS datacard?

Neggy

 

Alright, if you connect directly with Ethernet adapter (without a use of a Router) and the problem still persists on that system you using, the windows MTU needs to be tweaked.

This is how you can determine if MTU setting needs to be adjusted, normally;

ping www.yahoo.com -f -l 1500

If there is packet loss greater than 0, MTU should be adjusted.

And this can be done using DrTCP http://www.dslreports.com/front/drtcp.html

 

Please keep the personal attacks to oneself. The member is asking for assistance with WU issues as it relates to LNS rules or non LNS rules.

Take your personal differences to PM or another venue.

Thanks

 

I don't see how the MTU will affect it as I get the same results when I connect without a router via a GPRS datacard?

Neggy

 

Well you’ll have to trust me on this,

You posted https://www.wilderssecurity.com/showpost.php?p=517666&postcount=16

This information indicates the MTU size is bad, now you have two options, create a ICMP rule to permit this (but I wouldn’t recommend, since MTU adjustment can go a long way to help you and without the need for additional rule), and the one I highly recommend, MTU size adjustment.

 

To find the correct MTU size use PING, and accessing MS-DOS,
Type; ping www.yahoo.com -f -l 1500

Does it show ‘Packet needs to be fragmented but DF set.’? Try
Type: ping www.yahoo.com -f -l 1460

Does ‘Packet needs to be fragmented but DF set.’ appear, no? and continue to slightly increase the number until you see ‘Packet needs to be fragmented but DF set.’, the previous number is what you’d want to use, set in MTU field shown using DrTCP.

 

I am now connected via GPRS (no router involved).

WU isn't working with LnS Enhanced Rules.

I don't understand what this Ping stuff is or how to use MS-DOS.

 

In Windows 2000/XP, click on the Start menu, choose Programs | Accessories | Command Prompt.

In Windows 98, click on the Start menu, choose Programs | MS-DOS Prompt.

 

.....

 

Much appreciated. I look forward to them.

 

Thanks Phant0m,

Re: MS-Dos

ping www.yahoo.com -f -l 1500

Done it and I got the same results as your image above.

Sent 4, Received 0, Lost 4 (100% Loss)

ping www.yahoo.com -f -l 1460

Result is....

Sent 4, Received 1, Lost 3, (75% Loss).

What do I do now?

Neggy

 

Sorry above results were for my desktop (doesn't have LnS).

Results for my Laptop with LnS are the same except...

ping www.yahoo.com -f -l 1460

I get 'Resquest Timed Out' a 4 times then the result....

Sent 4, Received 0, Lost 4 (100% Loss)

 

No problem Defenestration.

Hey Neggy

If you using unaltered EnhancedRulesSet, ICMP Pinging should be permitted, so we try pinging another area, use; ping www.dslreports.com -f -l 1460

 

Hi Phant0m,

ICMP Pinging is ticked green in Enhancd Rules.

I am still geting the same results on ping www.dslreports.com -f -l 1460

3 x Time Out and 100% loss.

Neggy

 

You have only one third-party software firewall installed on that machine, which is Look 'n' Stop? Possibly your Router is what is blocking ICMPs....

 

Yes

I will check....but I still do not see how this makes a difference as I get the same results when I connect via GPRS??

Neggy

 

This is my router log:

Sun, 2002-09-08 12:00:29 - Initialize LCP.
Sun, 2002-09-08 12:00:29 - LCP is allowed to come up.
Sun, 2002-09-08 12:00:32 - CHAP authentication success
Sun, 2002-09-08 12:04:55 - Send out NTP request to time-g.netgear.com
Sun, 2002-09-08 12:05:57 - Send out NTP request to time-h.netgear.com
Wed, 2005-07-27 11:13:42 - Receive NTP Reply from time-h.netgear.com
Wed, 2005-07-27 11:07:46 - Router start up

I've looked at the menu's for the router and it doesn't indicate anything aboiut blocking ICMps

 

I think it is this rule stopping Windows Update working.

''ICMP : All ICMP types (nukes, ...)''

''Stops all ICMP types not allowed by other rules.
For example, ICMP nuke makes your computer
disconnect from IRC (Internet Relay Chat).''

Can anyone help?

Thx

Neggy

 

Do you mean that allowing the packets for this rule solves the issue ?

Thanks,

Frederic