> During the past two days, both of these firewalls became "maxed" out, for > lack of a better term. Specifically, both machines had reached their > maxtask limits and could no longer fork any new processes. A check of the > systems revealed very large numbers of HTTP connections from individual > internal client workstations. > > Does anyone know of some "new" browser plug-in or service pack which could > be responsible for this ?? ... Tell your users to keep JavaScript turned off when browsing the publicly accessible Internet, especially when browsing their porn sites. ;-} We had noticed in our firewall logs that some users visiting sites meriting reprimand had all of a sudden blossomed dozens within seconds. We also found out why. Also, make sure that your users have internal domains in their Exceptions or No-Proxy lists. Otherwise, all attempts to hit internal Web sites will be mediated by the Web proxy. -- Joe Yao jsdyat_private - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- PLEASE ... send or Cc: all "COSPO/OSIS Computer Support" mail to sys-admat_private ----------------------------------------------------------------------- This message is not an official statement of COSPO policies.
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:42:45 PDT