BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 01-28-2008, 03:50 PM   #1 (permalink)
New Member
 
Join Date: Jan 2008
Model: 8800
PIN: N/A
Carrier: Verizon
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default BES causing high CPU usage on Watchguard Firewall

Please Login to Remove!

Hello all,

Any have any ideas on this? Have a BES installed behind a Watchguard Firebox III 1000 and the SMTP service is basically consuming all available CPU clocks on the firewall itself. Even with only ~ 5 or so SMTP connections, they run for hours and hours it seems (CPU time used reported by the Firebox).

Only have 6x users on Blackberrys, seems to be something with the way the BES is doing stuff is making the Firewall mad. Slowing way down all the proxy connections through that box causing all sorts of problems.

Stop the BES, CPU usage on the firewall drops to ~ 30% or so right away.

Thanks!

Marty
Offline  
Old 01-28-2008, 04:55 PM   #2 (permalink)
Thumbs Must Hurt
 
Join Date: Nov 2006
Model: 8700r
Carrier: Rogers Wireless
Posts: 59
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

BES server doesnt do SMTP. What else is running on the BES server?
Offline  
Old 01-28-2008, 05:02 PM   #3 (permalink)
New Member
 
Join Date: Jan 2008
Model: 8800
PIN: N/A
Carrier: Verizon
Posts: 2
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

BES is running on a SBS 2003, exchange/SQL etc.

The firewall shows the SMTP proxys eating up CPU, turn off BES and problem goes away.


BES Running:

Load Average:
5.39 4.21 4.95 7/32 25819

CPU Usage:
100% 100% 100%


25817 /opt/bin/smtp-proxy S 1648 972 0:00.15 (13%) 1 (round robin)
25504 /opt/bin/smtp-proxy R 1652 976 2:00.04 (67%) 1 (round robin)

BES off:

Huh well crap, last night I turned off the BES and the SMTP activity dropped to nothing on CPU usage. Just tried it again, and it's not going away....
Offline  
Old 01-28-2008, 05:36 PM   #4 (permalink)
Thumbs Must Hurt
 
Join Date: Nov 2006
Model: 8700r
Carrier: Rogers Wireless
Posts: 59
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

You have a WatchGuard SMTP proxy issue. If you use a plain port forward of TCP 25 from untrusted to the Exchange server you will not have the CPU issue but you will lose protection of the SMTP proxy. Contact WatchGuard support.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.