Hi,
I know that if I change the global pool in any way or add/delete static
translations, I will experience random problems in translations. These
problems can occur within the the range of the global pool, as well as the
range for my static mappings. The only way I've found to work around these
problems is to "clear xlate". I tried at one point to "clear xlate global
x.x.x.x" or "clear xlate inside x.x.x.x" in order to only clear the changed
range, but this doesn't seem to work. "clear xlate" seems to be the only
fix.
Is this what you are experiencing?
-Brad
At 01:05 PM 6/6/00 +0300, Bishara, Anan wrote:
>
>
>I am facing the same problem. My exchange server stop receiving mail from
>outside. When I do an nslookup for my domain from and outside DNS, it gives
>request time out. When I do clear xlate, it works for sometimes and then
>stops. I tried upgrading the version to 5.1 but still the same problem. If
>anybody have a suggestions, it will really help to get rid this headache.
>
>Regards,
>Anan
>
>-----Original Message-----
>From: Astbury, Phil [mailto:[EMAIL PROTECTED]]
>Sent: Tuesday, June 06, 2000 11:21 AM
>To: '[EMAIL PROTECTED]'
>Subject: RE: PIX Firewall show connection counters
>
>
>We have a similar problem at our site - it seems as if the PIX just stops
>resolving DNS.
>Our exchange server is no longer able to send mail externally due to DNS
>lookup failures.
>We've looked at all the possibilities, but normally a reboot will fix the
>problem.
>
>We have added extra memory to the PIX, and also upgraded the Firmware - but
>we can't seem to get to the bottom of this !!
>If anyone out there has seen this or knows of a potential fix, I would be
>most grateful of some feedback.
>
>regards,
>Phil
>
>
>
>
>
> -----Original Message-----
> From: Apoorva S.Malavia [SMTP:[EMAIL PROTECTED]]
> Sent: 06 June 2000 05:25
> To: [EMAIL PROTECTED]
> Subject: Re: PIX Firewall show connection counters
>
> I need to see the config on the fw.
>
>
> "Bishara, Anan" wrote:
>
> Hello everybody, This maybe of topic of this message but it
>is related to it
> somehow. I have a DNS in my DMZ zone, I am facing problem is
>that DNS stop
> resolving names after a while and I have to clear Xlate,
>where it will work
> for a while and then stops again. Anybody have any
>suggestion or face this
> problem?
> Regards,
> Anan
>
> -----Original Message-----
> From: Apoorva S.Malavia [ <mailto:[EMAIL PROTECTED]>]
> Sent: Monday, June 05, 2000 9:36 PM
> To: [EMAIL PROTECTED]
> Subject: Re: PIX Firewall show connection counters
>
> more precisely
> clear xlate *
>
> Mark Holloway wrote:
>
> > Yes, "clear xlate" is what you want. Clear xlate will
>knock people off
> but
> > more than likely they will "refresh" their browser if it's
>web base. FTP
> > connection may timeout and telnet session will drop. You
>said "you might
> as
> > well reboot if you're gonna clear xlate" - but the PIX
>takes about a
> minute
> > to reboot as opposed to clear xlate being an instant
>function. In an
> > environment where I work we have 5000+ users on the inside
>interface using
> > the outside (internet) and dmz interfaces. A reboot would
>get me fired!
> >
> > Regards,
> > Mark
> >
> > ----- Original Message -----
> > From: Chuck Larrieu <[EMAIL PROTECTED]>
> > To: Jorge Rodriguez <[EMAIL PROTECTED]>; Pete Ruttman
>(adminpr)
> > <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > Sent: Wednesday, May 31, 2000 9:32 PM
> > Subject: RE: PIX Firewall show connection counters
> >
> > > I don't have a pix manual handy, but if memory serves,
>the command is
> > clear
> > > xlate
> > >
> > > I'm sure you all will let me know if I'm wrong :->
> > >
> > > Chuck
> > >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED] [
><mailto:[EMAIL PROTECTED]>] On Behalf Of
> > > Jorge Rodriguez
> > > Sent: Wednesday, May 31, 2000 7:21 PM
> > > To: Pete Ruttman (adminpr); [EMAIL PROTECTED]
> > > Subject: Re: PIX Firewall show connection counters
> > >
> > > Did you try " Clear Counters" ?
> > >
> > >
> > > ----- Original Message -----
> > > From: "Pete Ruttman (adminpr)" <[EMAIL PROTECTED]>
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Tuesday, May 30, 2000 2:50 PM
> > > Subject: Re: PIX Firewall show connection counters
> > >
> > >
> > > > >Is there any commands to clear the counters on a PIX
>?
> > > > >I amtrying to reset to 0 the numbers displayed by
> > > > >"show connections".
> > > > >
> > > > >It seems, the only way is a F/W reboot, to clear the
> > > > >`show connections` counters in order to monitor max
> > > > >number of TCP/IP connection through the PIX
> > > > >
> > > > My gut reaction is that isn't possible since the show
>connections is
> > > totaling the current xlate connections the PIX is doing.
>You can use
> > clear
> > > xlate to clear out the xlate connections but then of
>course you are
> > knocking
> > > people off so you might as well reboot.
> > > >
> > > > pete
> > > >
> > > > ___________________________________
> > > > UPDATED Posting Guidelines:
><http://www.groupstudy.com/list/guide.html>
> > > > FAQ, list archives, and subscription info:
><http://www.groupstudy.com>
> > > > Report misconduct and Nondisclosure violations to
>[EMAIL PROTECTED]
> > > >
> > >
> > > ___________________________________
> > > UPDATED Posting Guidelines:
><http://www.groupstudy.com/list/guide.html>
> > > FAQ, list archives, and subscription info:
><http://www.groupstudy.com>
> > > Report misconduct and Nondisclosure violations to
>[EMAIL PROTECTED]
> > >
> > > ___________________________________
> > > UPDATED Posting Guidelines:
><http://www.groupstudy.com/list/guide.html>
> > > FAQ, list archives, and subscription info:
><http://www.groupstudy.com>
> > > Report misconduct and Nondisclosure violations to
>[EMAIL PROTECTED]
> >
> > ___________________________________
> > UPDATED Posting Guidelines:
><http://www.groupstudy.com/list/guide.html>
> > FAQ, list archives, and subscription info:
><http://www.groupstudy.com>
> > Report misconduct and Nondisclosure violations to
>[EMAIL PROTECTED]
> > ---
>
> ___________________________________
> UPDATED Posting Guidelines:
><http://www.groupstudy.com/list/guide.html>
> FAQ, list archives, and subscription info:
><http://www.groupstudy.com>
> Report misconduct and Nondisclosure violations to
>[EMAIL PROTECTED]
>
> ___________________________________
> UPDATED Posting Guidelines:
><http://www.groupstudy.com/list/guide.html>
> FAQ, list archives, and subscription info:
><http://www.groupstudy.com>
> Report misconduct and Nondisclosure violations to
>[EMAIL PROTECTED]
> ---
>
> ___________________________________ UPDATED Posting Guidelines:
>http://www.groupstudy.com/list/guide.html FAQ, list archives, and
>subscription info: http://www.groupstudy.com Report misconduct and
>Nondisclosure violations to [EMAIL PROTECTED]
>
>___________________________________
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
>___________________________________
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
