We had a problem with PIX firewall and MQ clients connected through it. We
solved it by increasing the time intervals that the pix was using to
disconnect the users going through it. Look at these values:

timeout xlate 3:00:00 conn 1:00:00 half-closed 0:10:00 udp 0:02:00
timeout rpc 0:10:00 h323 0:05:00
timeout uauth 0:05:00 absolute

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 28, 2004 3:19 PM
To: [EMAIL PROTECTED]
Subject: Re: TCP error


Thanks for the many responses!

Our MQ servers are behind a PIX firewall in a special DMZ, The clients all
run the same application and it is written using the C++ library and
disconnect is the last thing called before the app terminates.

Also, each object that creates a connection should close the connection when
the object gets cleaned up.

The information from Bill, show below looks very interesting, does the PIX
firewall series do this ?


Sid




-----Original Message-----
From: Bill Anderson [mailto:[EMAIL PROTECTED]
Sent: Thursday, 29 April 2004 12:41 AM
To: [EMAIL PROTECTED]
Subject: Re: TCP error


Don't be so quick to judge the MQ server as the problem. We just recently
resolved that (almost) exact problem on AIX. The error code for AIX is
AMQ9208, but it is still a tcp/ip reset. We tracked the problem down to a
CSS router (Cisco equipment), not the MQ server. The CSS was reclaiming
inactive tcp socket connections at an alarming rate and reeking havoc with
my MQ servers. To make matters worse, it has a rather complex algorithm for
determining if and when to send a reset. If it has plenty of resources
available for new connections it may leave things alone. but when the
system is busy, look out! cuz its going to get real stingy and kill off
anything that has been idle for much less time than a heartbeat interval.

I know that don't solve your problem, but you may want to look beyond the
MQ server.

Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive

Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive

Reply via email to