What nic's are u running?
And have u tried with a non-smp kernel? Check this to be sure that it's not
the SMP kernel that mess things up.
Im currently running i similar enviroment (~2000 users) Rh7 (2.2.19-7.0.8)
+ Cpfw4.1-sp5. My firewall cpu-load is less than 0.1. But im not running
any VPN traffic from the firewall. Hardware is (P3-1Ghz, 256Mb RAM, 2x
Intel Dual Port 100 Pro NIC's, Asus CUSL2-C Motherboard).
best regards.
//Claes Jansson
At 09:32 2001-10-17 +0200, you wrote:
>On the system there is a squid proxy(configured with no disk cache).
>The squid load is about 45 http_req/s during the day, with about 3000 users.
>
>The system has 512MB RAM and 2 1000Mz Intel CPUs.
>
>Best Regards,
>
>
>-----Original Message-----
>From: Claes Jansson [mailto:[EMAIL PROTECTED]]
>Sent: Tuesday, October 16, 2001 9:05 PM
>To: [EMAIL PROTECTED]
>Subject: Re: [FW-1] Firewall and RH 7.0
>
>
>What load are we talking about? Users and Bandwidth.
>
>best regards,
>
> //Claes Jansson
>
>At 18:28 2001-10-16 +0200, you wrote:
> >I spoke too early...the problem still remains.
> >It happens during the day with higher system load.
> >
> >
> >Bes Regards,
> >
> >
> >
> >-----Original Message-----
> >From: Sommariva Graziano [mailto:[EMAIL PROTECTED]]
> >Sent: Tuesday, October 16, 2001 10:19 AM
> >To: [EMAIL PROTECTED]
> >Subject: Re: [FW-1] Firewall and RH 7.0
> >
> >
> >After ugrading to SP5 no more problems, besides SP3 did not claim to
>support
> >7.0 multiprocessor kernel.
> >
> >Best Regards,
> >
> >
> >-----Original Message-----
> >From: Jochen H�chner [mailto:[EMAIL PROTECTED]]
> >Sent: Monday, October 15, 2001 11:30 PM
> >To: [EMAIL PROTECTED]
> >Subject: Re: [FW-1] Firewall and RH 7.0
> >
> >
> >no works fine !!!
> >do you have enough RAM and hard disk space ???
> >
> ><<< Sommariva Graziano <[EMAIL PROTECTED]> 10/15 5:36p >>>
> >Did you have my same problem in sp3?
> >
> >Best regards,
> >
> >
> >-----Original Message-----
> >From: Ant�nio Cardoso [mailto:[EMAIL PROTECTED]]
> >Sent: Monday, October 15, 2001 4:26 PM
> >To: [EMAIL PROTECTED]
> >Subject: Re: [FW-1] Firewall and RH 7.0
> >
> >
> >
> >Try with sp4 or sp5 i've managed to put one to work with sp4 and another
> >with sp5
> >
> >Ant�nio Cardoso
> >[EMAIL PROTECTED]
> >
> >
> >-----Original Message-----
> >From: Sommariva Graziano [ mailto:[EMAIL PROTECTED]
> ><mailto:[EMAIL PROTECTED]> ]
> >Sent: Monday, October 15, 2001 2:44 PM
> >To: [EMAIL PROTECTED]
> >Subject: Re: [FW-1] Firewall and RH 7.0
> >
> >
> >I do agree in part.
> >
> >I did excatly what you say, but the system hang 50% of time while intalling
> >new polices from ManST. It works fine, if it does not freeze.
> >
> >Best regards,
> >
> >-----Original Message-----
> >From: Jochen H�chner [ mailto:[EMAIL PROTECTED]
> ><mailto:[EMAIL PROTECTED]> ]
> >Sent: Thursday, October 11, 2001 6:51 PM
> >To: [EMAIL PROTECTED]
> >Subject: Re: [FW-1] Firewall and RH 7.0
> >
> >
> >oh, it's no problem.
> >1st you gotta install the rh 7, then the check point 4.1 for linux, but
> >don't start it. after a service pak install sp3 and later it works without
> >any problem.
> >
> ><<< Aeon Hale <[EMAIL PROTECTED]> 10/11 12:55p >>>
> >I'm trying to get Checkpoint installed on RH 7.0. It's being a pain. Basic
> >RH installation. In fact, off the 4.1, SP2 Checkpoint CD, rpm -ih ***.rpm
> >works great. It installs Base version of checkpoint no problem, i think
> >version 414**...not sure of the rest. Anyway, I get it all setup,
>licensed,
> >users, gui-clients, etc....reboot...no prob. I goto upgrade to SP2 or SP3,
> >it doesn't like that. Says it need CPfw-1 installed first. I run rpm -u
> >..rpm --nodeps (which usually works in the past) and it
> >installs....doesn't seem to be giving me grief. I goto reboot...KERNEL
> >PANIC...
> >
> >I know somebody out that has successuflly installed this on 7.0. I've done
> >6.2 way too many times and I'd be happy to stick with it, but RH 6.2
>doesn't
> >like my AMD Athlon CPU.
> >
> >Any help would be appreciated.
> >
> >Thanks,
> >
> >Aeon Hale
> >Security Engineer
> >CCSA,CCSE,CCSI
> >Accenture
> >
> >
> >===========================================================================
>=
> >
> >====
> > To unsubscribe from this mailing list, please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> ><http://www.checkpoint.com/services/mailing.html>
> >===========================================================================
>=
> >
> >====
> >
> >===========================================================================
>=
> >
> >====
> > To unsubscribe from this mailing list, please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> ><http://www.checkpoint.com/services/mailing.html>
> >===========================================================================
>=
> >
> >====
> >
> >===============================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> ><http://www.checkpoint.com/services/mailing.html>
> >===============================================
> >
> >===============================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >===============================================
> >
> >===============================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >===============================================
> >
> >===============================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >===============================================
> >
> >===============================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >===============================================
> >
> >===============================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
> >http://www.checkpoint.com/services/mailing.html
> >===============================================
>
>===============================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>===============================================
>
>===============================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>===============================================
===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================
