Cisco 678 Boots me off servers.

[Koshi]

I Got a problem i was wondering if i can get some help please! i cant get it to stop!.

MY cisco 678 keeps kicking me off Telnet mirc and gaming mucks/mud/moo's servers (example like 178.234.234.212 port 2069).


After about 10-15 minutes of inactivty it closes the connection to just that server and even stranger if i have like 2 connnects to the same server going it will just kill the one that is idle.


and i have to keep network traffic either from me or the server has to be sending packets to keep the connection up it is really bugging me because some time i have to wait in line for downloads and i get booted.


i never had this porblem with my old dsl but when i switched to
msn and qwest dsl, bought a linksys wireless router then had to use the msn 1000 dsl modem.

i though switching to the cisco would fix it but it hasn't. (still better than the msn 1000 though)


Just anyway to at least Extend the time before it closes would help or better yet turn it off all the way. i set the NAT to MAXium time out (useing the set nat timeout tcp 6500 command for all them) and it still seems the same



even tryed setting the server a special port useing (SET NAT ENTRY 120.432.345.222 1069) and i can't anythign to work

any idea's would help me a lot thanks

[fluxy]

Cant you find a way to ping the server and at least keep the packets alive?

[Koshi]

sorry not that i know of unless i set there and keep sending commands of nothing by hand.

It never did it before i got the new MSN isp, linksys router and there dsl modems

With my old Qwest AOl Dsl (Ewww) with creative broad band blaster dsl modem connected with usb cable. i could stay connected to anything no problem for days at a time.
and i still use Qwest dsl with my new msn isp .


So im not sure what the problem is it is either my router ISp Or new modem.


My only guss so far is that i have to enable NAT By useing the (set nat enable command) to use Msn with cisco.

i Think it might be a nat firewall That closes the port after my computer sends something to the computer and of nothing goes though it closes it. i set the nat to max timeouts but i didnt notice any change and i try to keep it open but cant.


Even if somebody can point me in the direction of the problem would be helpful thanks.

[fluxy]

Another thought: try placing your PC in the router's DMZ and use a software firewall (ZoneAlarm Pro highly recommended). If its the router then its filtering is bypassed.

[Mntsnow]

What firmware are you running on your Cisco? Have you ruled out the Linksys router as being the problem by connecting your PC directly to the Cisco router/modem?

[Koshi]

No not yet im not sure if it is the cisco or linksys wireless router (acting as a gateway to the cisco ).

the funny thing is i turned off the linksysr outer accidently once i came back and connected to the server, and my old connection was still there, and the new one. witch makes me think my modem still had the connection going.


i would love to use a software firewall but for some reason on the cisco, i must use the (cbos#set nat enable) command to even get it to connect to my dsl and isp.. with out it i can't do anything


im not sure if the set nat enable command is a NAT firewall yet though.


So i would try What fluxy said about the Dmz but im not sure how this is my first router and i have not got how to work the thing it all the way yet.


i upadted the cisco 578 and router's firmware to the lateist versions. cisco has cbos v2.4.7 and the linksys has it lateist firmware from the linksys.com site.:o :o :o :o

[Mntsnow]

Have you disabled the Web interface of the Cisco as well as the Telnet? both have known exploits that can cause the cisco to drop out until you reboot it

[fluxy]

Originally posted by Koshi
... about the Dmz but im not sure how this is my first router and i have not got how to work the thing it all the way yet. You'll stumble right into it; its easy. The setting should be on the advanced page (I dont quite recall the Linksys interface). Basically you select or type your MAC or IP in the space provided and tell the router to place it into the DMZ by selecting 'Enable' or something similar.

This maps the WAN IP to your PC basically, so you'll be exposed to the net. Try not to remain that way for too long. Maybe you can even go to GRC (https://grc.com/x/ne.dll?bh0bkyd2) and check of your status (click on 'All Service Ports' lower down on the page).

[Koshi]

I think i did. But i did it again just to make sure.
(used set telnet disable and set web disable..)


ill check and see if it helps thanks!.

when it cuts out the web like down loads from places like www.fileplanet.com are still going and Mirc connects just die if left idle and i haven't touched the time out in the programs them selfs =( .

and my Text based muck rpg's games i got going die too it really bites. and i cant find out why


i set up a file shareing in mirc and run rooms on the mucks and during long waits of idleness with nothing happening it kills it pretty much makeing that impossible now unless i sit and watch it :confused:


On the upside MY pings and speed are great!!:D

[Koshi]

And on the Dmz side of things my routers page has a tab for DMZ

But it looks like the only thing there is a Ip address slot rather than a mac and that is all i can see. DMZ Host address is what is under the tab And my pc uses DHCP so im not sure what my ip is on anything because it is always changeing.


Sorry if i don't know my way around the router but it has been giving me lots fo trouble ( i can't even enable WEP encryption with THe right network keys with out looking my self out of it)

and the laptop connected to it only works some time while my main pc and Xbox work fine all the time so basicly i have no security but i live in the middle of no where so there porbabley is no 802.11b network hackers for miles.

anyway im sorry i tyed to find a way to check that but can't =/

[Koshi]

Oh wait never mind i think i found It i put it in and hit Ok

and Ran the test (very nice site!).

and i got this


GRC Port Authority Report created on UTC: 2003-08-25 at 07:23:24

Results from scan of ports: 0-1055

8 Ports Open
1046 Ports Closed
2 Ports Stealth
---------------------
1056 Ports Tested

i don't want to put it all up for security reasons =)

i don't know if it good or bad but it looks like some ports i use are closed. one of the servers that cut me off has port 2069

Thanks for trying to help me by the way.

[fluxy]

You're welcome!
But things look really bad. You dont want any ports open, and the vasy majority should be stealth; not closed. Right now you're a sitting duck. Maybe you should get out of the DMZ.

Have you tried ruling out the router as Mntsnow suggested?
I cant think of anything else for now... sorry. Im not familiar w/ the Cisco.

[Koshi]

thats is ok, i think it might be the router or the cisco i cant tell or don't know a good way too check.



i'd like to open some ports or at least foward everything to pass thorugh one of my open ports or something

but i don't know how. Most are listed as "stealth" Good for keeping people out Bad for useing some stuff like mirc and games :confused:

[fluxy]

My guess is that its the Cisco. Im not aware of Linksys being 'adaptive' in its filtering (actively passes packets then closes if no activity). Do you have a link to the Cisco manual? Maybe I can look at it.
Originally posted by Koshi
i'd like to open some ports or at least foward everything to pass thorugh one of my open ports or something but i don't know how. Most are listed as "stealth" Good for keeping people out Bad for useing some stuff like mirc and games :confused: Go through the router manual; it'll help. You can cfg it to your liking. All you need to know is the port #s that the games use and you can set the router to allow packets headed for those ports to go to your IP.

Its frustrating but keep at it. You'll learn alot.
Try this (http://www.diywebserver.com/hardware/router.html) link for a better grasp.