Text 26872, 57 rader
Skriven 2015-05-10 20:07:00 av NANCY BACKUS (1:123/140)
     Kommentar till en text av MARK LEWIS
Ärende: Re: IDS/IPS rules
=========================
-=> Quoting Mark Lewis to Nancy Backus on 05-02-15  07:54 <=-

 ML> IIRC, you are using DOS and the watcom tcp stack... the settings for
 ML> it are in the wattcp.cfg file?? if so, please check the optional values
 ML> for SOCKDELAY, INACTIVE and DATATIMEOUT... according to the open-watcom
 ML> project on github, they should be 30, 0 and 120 by default
 ML> respectively... i think SOCKDELAY is the initial SYN timeout which is
 ML> 30 seconds... if these items are not set in your wattcp.cfg file, they
 ML> should be using the mentioned defaults if they are the same as the
 ML> newer stuff used today... 

According to the cfg file, SOCKDELAY=60 (default was 30, lengthened for
dialup), INACTIVE=0, DATATIMEOUT=120.  We've been using these numbers
since 2004 (according to the Wizard)...

 ML> i can look deeper by digging into the captured network packets which
 ML> the IDS/IPS pulls every time it raises an alert...
 
Could be interesting.... 

 ML>> [...] the hard thing there, that many don't reallize, is that the
 ML>> actual network traffic still has to travel through via one core...
 ML>> anyway, it gets real deep real quickly...
 NB>> I almost follow... but yes, real deep real quick...  

 ML> hopefully the above 3-way handshake isn't too hard to follow... 

No, that seemed to make some sense...

 NB>> And, just after the new line went in, I was doing just fine for a 
 NB>> few days before I got zapped...  I'm still just scratching my head 
 NB>> trying to make sense of it all...  ;) 

 ML> yeah, i don't know what happened... i'll have to go back and see if i
 ML> can correlate my notes and try to find a time line for this... i wasn't
 ML> aware that you had been able to connect with the new lines in place...
 ML> i changed the news about 30 minutes after they had gone live but don't
 ML> recall when i played my first (next??) move in scrabble after that... i
 ML> do recall there were several days that passed and i figured you were on
 ML> another little trip somewhere... 

Your message that the lines were in was dated the 7th... my first being
unable to get in was on the 12th.

 ML> recipe? hummm... 9:38 so let's see what recipe 938 is...
 ML> Title: PERFECT APPLE BUTTER
 ML> dang... an you don't/can't do apples... sorry :( 

Oh, well....  ;0

ttyl       neb

... Ham on rye -- a drunk radio operator.

___ Blue Wave/QWK v2.20
--- Platinum Xpress/Win/WINServer v3.0pr5
 * Origin: Check Out Doc's QWK Mail  Via Web BBS > DocsPlace.org  (1:123/140)