[ previous ] [ next ] [ threads ]
 From:  "Kristian Shaw" <monowall at wealdclose dot co dot uk>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Re: [m0n0wall] VPN shares latency
 Date:  Mon, 13 Feb 2006 18:57:10 -0000

I've never found windows file shares snappy on anything less that 10mb 
connections, but if you are seeing delays of 30 secs or more when navigating 
shares on then look out for:

1. Link speed
2. Latency (big impact on CIFS/SMB)
3. MTU/Fragmentation issues

To determine 1. use one of the online speed tests to see if your link 
matches what you think it should. To determine 2. use the 'ping' command. 
Anything above 200ms (ish) will make file shares slow. To resolve 3. try 
ticking the 'allow fragmented packets' on the rule that accepts traffic from 
the PPTP clients.



----- Original Message ----- 
From: "Paolo Perucci" <paolo dot perucci at perucci dot net>
To: <m0n0wall at lists dot m0n0 dot ch>
Sent: Monday, February 13, 2006 6:11 PM
Subject: [m0n0wall] VPN shares latency

> Hello everybody,
> I'm pretty a newbie in M0n0wall and I tried to use a VPN to manage local
> windows shares from a remote PC. I succeed in viewing directories like
> \\nameserver\specificfolder and I can also explore local domains, so I
> suppose wins works good (my file server is an NT 4.0). However exploring
> folders and domains requires much more time than I expect...
> While entering VPN, my (variable) external IP (something like 217.201.x.y)
> has an internal reference IP (like
> PPTP VPN rules allow everything from anywhere but looking at logs I can se
> many request like this: 18:10:57.020797 PPTP 217.201.x.y, port 445
> 217.201.j.k, port 4001 TCP where source port is some times 445, some times
> 135 or 139...
> That sounds strage to me because PPTP rules should let pass those 
> pacchets.
> What's wrong with my configuration?
> Thanks in advance!
> Paolo Perucci
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch