Re: ZyWall 5 V4.00 (XD.2) released in ZyXEL http://www.dslreports.com/forum/r14766974 en Sat, 28 Nov 2009 21:10:27 EDT Sat, 28 Nov 2009 21:10:27 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14797634 DavidJWood : At the moment, the only way to get the benefit of resetting to defaults is to reset to defaults and reconfigure from scratch. Supposedly a way to save the configuration as text is coming, but we don't have such a feature yet.

I only reset to defaults when necessary - that doesn't include going between minor relases unless there's some sort of change and I'm getting problems. I last reset my Z35 to defaults on 4.00(WZ.0) - I've since upgraded to 4.00(WZ.1) and then 4.00(WZ.2).

I have my Z35's entire configuration documented in a Word file, which I keep up to date, Producing it in the first place helped me to review all the configuration decisions. Keeping it up to date every time I make a change isn't too onerous, and it makes me review each decision as I go.

David]]> http://www.dslreports.com/forum/remark,14797634 Sun, 13 Nov 2005 19:04:54 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14794978 Anav : Cjax, the ZyWALL 5 is capable of throughput speeds one way of around 32Mbps.

Buying a UTM version is the least cost effective method of getting a turbocard and subscription. The turbocard is not required for standard use. My advice is if you dont want to go whole hog, then just buy the plain router now and then the turbosuite box (card plus subscription) at a later date. This is more cost effective than buying the UTM on spec and sometime later getting the subscription only.

»froogle.google.com/froogle?q=zyw···start=20

--
Ain't nuthin but the blues! "Albert Collins".
Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner"

LlamaWorks Equipment]]> http://www.dslreports.com/forum/remark,14794978 Sun, 13 Nov 2005 11:15:30 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14794639 Hank : The speeds are dependant upon the routing and load on the network. In some cases I am exceeding the 15 down. In other cases I see speeds between 7 to 15 down. My upload has always been around 2100. ]]> http://www.dslreports.com/forum/remark,14794639 Sun, 13 Nov 2005 10:02:30 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14794422 cjax :
said by Hank See Profile :

I have the 15/2 service on Cox and run V4.0 (XD2) on my ZyWall and do not notice any degradation in service. I installed V4 a couple days ago and have ran several speed test with a heavy load on the router and have not seen poor throughput.
What were your actual speeds? I have 10/1 service right now from Optimum Online but In reality i get 6.2mbps/900kbps. Do you actually get 15 meg down? Many FiOS users are reporting speeds of 14.97mbps down/1.9x mbps up, for the 15/2 tier. Just curious if those were your "real world" download speeds, or just what you are provisioned for. ]]> http://www.dslreports.com/forum/remark,14794422 Sun, 13 Nov 2005 09:06:08 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14794290 Hank : I have the 15/2 service on Cox and run V4.0 (XD2) on my ZyWall and do not notice any degradation in service. I installed V4 a couple days ago and have ran several speed test with a heavy load on the router and have not seen poor throughput.]]> http://www.dslreports.com/forum/remark,14794290 Sun, 13 Nov 2005 08:31:09 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14794276 cjax : I'm looking to buy a ZyWall 5 after reading some of the reviews of the netgear FVS338. My concern is the throughput issue that a few people brought up, with V4 firmware. The reason I ask is b/c I have ordered VZ FiOS internet service at 15/2. Will the ZyWall 5 achieve these speeds with V4 firmware???]]> http://www.dslreports.com/forum/remark,14794276 Sun, 13 Nov 2005 08:25:45 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14794195 Shootist :
said by Sr Tech See Profile :

One question is their a difference here from Zyxels ftp. I see 2 directories one for a Zywall5 and one which is posted for a Zywall5UTM. Are they both the same unit.?
Yes the Z5/35 are the same as the Z5UTM/35UTM. the difference is the UTM models come with the new Turbo card. If you have a Z5 or 35 (No UTM) and add a Turbo card you have turned that unit into a Z5UTM or 35UTM, that is IF you are running the V4 firmware.
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14794195 Sun, 13 Nov 2005 06:02:29 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14794177 Sr Tech : One question is their a difference here from Zyxels ftp. I see 2 directories one for a Zywall5 and one which is posted for a Zywall5UTM. Are they both the same unit.?]]> http://www.dslreports.com/forum/remark,14794177 Sun, 13 Nov 2005 05:47:02 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14792812 jig :
said by Anav See Profile :

(same as loading the rom file separately just doing it the lazy way)
maybe not just lazy. there have been other firmwares for other brands where the rom sent with the bin has itself been corrupt. resetting to defaults through the maintenance page ensures at least some kind of standard, in most cases anyway.]]> http://www.dslreports.com/forum/remark,14792812 Sat, 12 Nov 2005 21:56:28 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14788864 Anav : That is weird!
Just to let you know when I load new firmware,
- go to mainatenance page and do a soft reboot to clear caches
- load firmware via upload through webgui
- after the load reset the config to defaults via
the maintenance page on the web gui.
(same as loading the rom file separately just doing it the lazy way)
--
Ain't nuthin but the blues! "Albert Collins". Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner" LlamaWorks Equipment]]> http://www.dslreports.com/forum/remark,14788864 Sat, 12 Nov 2005 10:29:15 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14788578 PVU : Thanks all. Since it’s the consensus that there should be no speed issues, I’m not going back. If I see problems, I’ll reset and re-config. I should probably do it once anyway (Anav was a BIG help the first time).

David, if there are subtle corruptions residing in the config, would they possibly be corrected by upgrading the firmware (from say 4 XD.1 to XD.2)? Shoot, I did reset for about 30 seconds – did what you said. Then I uploaded the saved 4x, then went to 4 XD.2. It seems to be OK at this point, but I may end up going the re-config route.

Anav, interestingly enough, WAN to WLAN and LWAN to WAN were not dropped by default.]]> http://www.dslreports.com/forum/remark,14788578 Sat, 12 Nov 2005 09:19:39 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14781446 Anav : The X-550 is a gaming oriented home router with the addition of MIMO, comparing to SMB is really not that useful.

Concur, WAN to WLAN should be drop by default!!

Please use the z70 demo link to view the firewall defaults page..........
»New INTERACTIVE ZYWALL 70 DEMO]]> http://www.dslreports.com/forum/remark,14781446 Fri, 11 Nov 2005 09:08:41 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14780916 Shootist :
said by PVU See Profile :

I lost you guys for a moment, and got a real sinking feeling:huh:

But I'm back! It did not take the downgrade too well, so I had to get to the router and upload the 4 XD.0 (saved), then XD.2. Whew!!

I seem to be moving faster - but there's no one else using the bandwidth.
Do you mean you are the only one at this time connected to the 1.5Mbs connection?
About the only way to tell is to swap out the Zywall with a different router and see if you go faster or go back to the 3.64 firmware. If you try to go back to 3.64 after the flash is done you have to hold IN the RESET button for 15 seconds or more. I've gone back and forth between 4 and 3.64 and had to do the LONG reset whenever going back to 3.64.

said by PVU See Profile :

On the new 4 firmware, there are new default settings that weren't there in 3x:

WAN to WLAN: ? - the default is Permit
WLAN to WAN: ? - the default is Permit

The only defalts (with no rules) before was LAN to LAN, and LAN to WAN. There were (and are) LAN to DMZ and WAN to DMZ rules.

Can I disable to WLAN stuff? - we run on a LAN (don't know what WLAN is all about).
I think all those were there in 3.64? My default rule is set to Drop WAN to WLAN and I haven't change it. Don't know how your got set to Permit.
Yes you can set it to Drop and until you install a WLAN card (Wireless card) it really doesn't matter.

said by PVU See Profile :

Also, the 4x defaults are "drop". Why not use "reject"? Before there was "permit" or "block" - no 3rd option.

I don't think I want to try going back to 3x. When you say reset defaults, do I have to go through the whole thing again? Or, if the setting were good (retained) should I just re-apply the the settings? Thanks
What you need to do is hit either the reset button on the front of the unit or use the reset link in the WEB GUI, that take the router back to factory defaults. Then you need to do ALL of the setting you need, WAN connection, Static DHCP, Port forwarding and firewall rules, by hand again, NOT using a saved configuration file. Actually the last time I reset my Z5 I loaded the default ROM file that came with the 4.0 (XD.2) firmware because I was unsure if I had ever loaded any of the default ROM files that came with previous firmwares and there are some notes about making changes to a older ROM files. So I figured the best thing to do would be to just load the newest ROM file and then do all my setting by hand from scratch.
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14780916 Fri, 11 Nov 2005 06:13:00 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14779805 DavidJWood : Unless you have a wireless card in the ZyWALL, you can forget about the WLAN zone - under 4.00, WLAN is only available if you have a wireless card. By default, the wireless card is in the LAN zone, but you can set it to be in DMZ or the new WLAN zone under 4.00 (under 3.x, it was always in LAN).

The nearest equivalent to the old "block" is "drop", assuming that you didn't change the default behaviour of the ZyNOS 3 firewall. Both drop unwanted traffic without sending a TCP RST - so called "stealth". Reject is the same as "drop", but also sends an ICMP Destination Unreachable message back.

By reset to defaults, I mean pushing the button to restore to factory defaults in Maintenance -> Backup & Restore or equivalent. Even though things may look OK, there may be subtle corruption in settings converted when you upgraded from 3.x, which restoring to defaults and reconfiguring from scratch may solve.

Before you reset to defaults, save your settings (just in case you want to get back to where you were - though if you reload that configuration, you've undone any benefit of resetting to defaults) and make sure you have any notes you need to reconfigure the router.

David]]> http://www.dslreports.com/forum/remark,14779805 Thu, 10 Nov 2005 23:16:46 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14779752 PVU :
said by DavidJWood See Profile :

I wonder if a better solution, rather than downgrading, is to reset to defaults under 4.00 and reconfigure from scratch. There are various changes in version 4 firmware and that may help.

My apologies if you've already done this, but if you downgrade to version 3 and you don't have a saved configuration from version 3, you'll have to reconfigure from scratch under version 3. As version 3 firmware is the past, and may well not receive that much more attention, it seems better to put your effort into what's to come, and try to get ZyXEL's help if you have a problem with version 4, rather than spending time downgrading.

Of course, it has to be your choice!

David
I lost you guys for a moment, and got a real sinking feeling:huh:

But I'm back! It did not take the downgrade too well, so I had to get to the router and upload the 4 XD.0 (saved), then XD.2. Whew!!

I seem to be moving faster - but there's no one else using the bandwidth. On the new 4 firmware, there are new default settings that weren't there in 3x:

WAN to WLAN: ? - the default is Permit
WLAN to WAN: ? - the default is Permit

The only defalts (with no rules) before was LAN to LAN, and LAN to WAN. There were (and are) LAN to DMZ and WAN to DMZ rules.

Can I disable to WLAN stuff? - we run on a LAN (don't know what WLAN is all about).

Also, the 4x defaults are "drop". Why not use "reject"? Before there was "permit" or "block" - no 3rd option.

I don't think I want to try going back to 3x. When you say reset defaults, do I have to go through the whole thing again? Or, if the setting were good (retained) should I just re-apply the the settings? Thanks ]]> http://www.dslreports.com/forum/remark,14779752 Thu, 10 Nov 2005 23:08:58 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14779469 DavidJWood : I wonder if a better solution, rather than downgrading, is to reset to defaults under 4.00 and reconfigure from scratch. There are various changes in version 4 firmware and that may help.

My apologies if you've already done this, but if you downgrade to version 3 and you don't have a saved configuration from version 3, you'll have to reconfigure from scratch under version 3. As version 3 firmware is the past, and may well not receive that much more attention, it seems better to put your effort into what's to come, and try to get ZyXEL's help if you have a problem with version 4, rather than spending time downgrading.

Of course, it has to be your choice!

David]]> http://www.dslreports.com/forum/remark,14779469 Thu, 10 Nov 2005 22:31:08 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14779320 jig :
said by Shootist See Profile :

I don't know about anyone else but the most Nat sessions I ever used was with 2 P2P apps running, Limewire and WinMX, doing multiple searches on both and multiple downloads on both I got to something like 3700. Not sure if you could ever get to 16000 on a home connection anytime in the near future. Ok Yes you could have the fastest connection on the planet for home use but just how many people will have that type of connection. And with the way things are going P2P could be dead anytime in the near future.
i doubt that very much (the last).

how do limewire and winmx stack up against 3 or 4 large torrents all going at the same time?

actually, can i just get an idea of sessions open by running netstat -an on a win machine? or maybe tcpview? or are there usually a bunch of orphaned nat sessions left in the table of the router for a long time?

edit->well, after running the command "ip nat iface enif1 st" on my old rt314, i see that its table size is 256... and doesn't that correspond to the number of nat sessions?

maybe i'm worrying about nothing important.]]> http://www.dslreports.com/forum/remark,14779320 Thu, 10 Nov 2005 22:10:08 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14779296 jig : there WERE initial reports of a slowdown, but it seemed to be a symptom of not resetting the zywall to all defaults from within the firmware and then inputting all the user specific details.

so, if you are seeing a speed drop, try resetting to all defaults, go through the initial setup, and test it again.

your switch should have no bearing on the relative speed changes. i suppose if it was a managed switch and its internal ip address somehow was in contention with the new routers subnet then maybe, but otherwise i have yet to see either a hub or switch be incompatible with multi-vendor hardware, as long as the hardware doesn't have a mechanical fault.]]> http://www.dslreports.com/forum/remark,14779296 Thu, 10 Nov 2005 22:06:07 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14779245 Shootist : Yes you can go back to v3 but after the firmware uplaods the router will go into a continuous reboot. Just hold in the reset button for 15 second and it will clear the reboots and you'll be good to go.

Personally I have not seen any slow downs at all since going to V4 firmware and if there was a problem with V4 it would of shown up on other users units and been reported here. I haven't seen any other than yours.
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14779245 Thu, 10 Nov 2005 21:58:58 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14779140 PVU :
said by Shootist See Profile :

None here. From looking at the data sheets it looks like the FW throughput has been lowered on all models with the V4 firmware compared with the 3.64. Z5 80 v3.64, 65 v4, Z35/70 down 10 instead of the 15 for the Z5. The VPN is also down a little on the Z35/70 but the same for the Z5.

Just what type of speed problem are you having and how fast is your connection.
Shoot, I'm assuming that lowered FireWall throughput is a good thing?

After upgrading, it seemed as if overall speed really went south. Interestingly, it seemed that there was a disproportionate split between the users – some faster than others. But, generally speaking, overall speed decreased.

I checked with my (1.5 mbps) provider – thinking it could be on their end. The prelim tests were all good (just shy of 1.5).

Can I go back to 3x?

Also, I’m using a Linksys router as a switch. I would hate to switch switches because my problems are new, but is there a difference in switches.

I wish I could offer more. I guess the big question is: Can I go back to 3x to see what’s up? Thanks]]> http://www.dslreports.com/forum/remark,14779140 Thu, 10 Nov 2005 21:45:36 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14779025 Shootist : I don't know about anyone else but the most Nat sessions I ever used was with 2 P2P apps running, Limewire and WinMX, doing multiple searches on both and multiple downloads on both I got to something like 3700. Not sure if you could ever get to 16000 on a home connection anytime in the near future. Ok Yes you could have the fastest connection on the planet for home use but just how many people will have that type of connection. And with the way things are going P2P could be dead anytime in the near future.
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14779025 Thu, 10 Nov 2005 21:32:37 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14778781 jig :
i guess my only hesitation is that whoever decided on nat sessions for the 551 thought that 16000 was appropriate...

?]]> http://www.dslreports.com/forum/remark,14778781 Thu, 10 Nov 2005 20:59:19 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14778775 Shootist : None here. From looking at the data sheets it looks like the FW throughput has been lowered on all models with the V4 firmware compared with the 3.64. Z5 80 v3.64, 65 v4, Z35/70 down 10 instead of the 15 for the Z5. The VPN is also down a little on the Z35/70 but the same for the Z5.

Just what type of speed problem are you having and how fast is your connection.
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14778775 Thu, 10 Nov 2005 20:58:16 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14778424 PVU : Lama wrote:

Take a look at the spec sheets for the two different products........ the diff being firmware, the UTM 4.0 and beyond for all three models 5/35/70 has less throughput and less concurrent sessions in order to (in conjunction with the turbo card) handle the AV/IDP subscription...


I have no turbo card. Less throughput: Would it be best to use the latest 3x firmware? I have no AV/IDP. I'm having some speed problems since upgrading to 4x. Is anyone else?]]> http://www.dslreports.com/forum/remark,14778424 Thu, 10 Nov 2005 20:09:18 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14778034 jig : well.... home use with some p2p...]]> http://www.dslreports.com/forum/remark,14778034 Thu, 10 Nov 2005 19:11:24 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14777994 Shootist : Well even for a business with ?# users, maybe 40-60+. Normal web browsing doesn't use up a lot of NAT session. It's when you have 2-3-4-5-6 people using a P2P app that eat away at them.
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14777994 Thu, 10 Nov 2005 19:05:52 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14777861 jig : ah, ok. so for single home use, probably plenty.

just wondering, is there a way to get current sessions on an old rt314? ]]> http://www.dslreports.com/forum/remark,14777861 Thu, 10 Nov 2005 18:47:13 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14773192 Shootist :
said by jig See Profile :

hmm. why is it hard coded? seems like something worth being able to change.
Well you can change it, up to the MAX allowed. Which on the Z5 is now 4000. It uses to be 6000. No real biggy being at 4000 for normal use. 4000 should handle many users with normal browsing and a couple of users with heavy P2P use.
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14773192 Thu, 10 Nov 2005 05:45:13 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14771531 jig : hmm. why is it hard coded? seems like something worth being able to change.]]> http://www.dslreports.com/forum/remark,14771531 Wed, 09 Nov 2005 22:08:18 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14768208 bbarrera : Yes, Brano's post was in agreement with my earlier post.]]> http://www.dslreports.com/forum/remark,14768208 Wed, 09 Nov 2005 14:54:10 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14768182 Anav : Then Brano would be correct.]]> http://www.dslreports.com/forum/remark,14768182 Wed, 09 Nov 2005 14:49:49 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14767220 bbarrera : No differing opinions. My understanding is that # sessions is hard coded (compiled) into current 4.00 firmware.]]> http://www.dslreports.com/forum/remark,14767220 Wed, 09 Nov 2005 12:28:14 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14767000 Anav : Hmm I sense differing opinions....... ;-)]]> http://www.dslreports.com/forum/remark,14767000 Wed, 09 Nov 2005 11:54:26 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14766985 Brano : No, you won't be able to change it. It's set to 4000 sessions for ZyWall5 since ZyNOS4.00.]]> http://www.dslreports.com/forum/remark,14766985 Wed, 09 Nov 2005 11:51:43 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14766974 Shootist : I'm wondering IF I can bump up the NAT session back to 6000 since I'm never going to use a turbo card but I do look forward to the next version firmware so I can assign 1 port to WLAN, without having a WLAN PC card installed.
Is the NAT sessions a hard coded part of the firmware or could it be changed in autoexec.net file??
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14766974 Wed, 09 Nov 2005 11:48:37 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14766287 bbarrera : Throughput is normally a function of features enabled, so if AV/AS/IDP are disabled then throughput should be same between UTM and non-UTM firmware. I believe the number of concurrent session is compiled into the firmware and does not change based on features enabled.]]> http://www.dslreports.com/forum/remark,14766287 Wed, 09 Nov 2005 10:02:10 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14765588 Anav : Take a look at the spec sheets for the two different products........ the diff being firmware, the UTM 4.0 and beyond for all three models 5/35/70 has less throughput and less concurrent sessions in order to (in conjunction with the turbo card) handle the AV/IDP subscription...
--
Ain't nuthin but the blues! "Albert Collins". Leave your troubles at the door! "Pepe Peregil" De Sevilla. Just Don't Wifi without WPA, "Yul Brenner" LlamaWorks Equipment]]> http://www.dslreports.com/forum/remark,14765588 Wed, 09 Nov 2005 07:33:12 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14765005 OnHeL : Yes it is.]]> http://www.dslreports.com/forum/remark,14765005 Wed, 09 Nov 2005 02:07:32 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14764994 StorminNorm : Noticed the link is for Zywall 5 UTM. Is this firmware compatible with the standard Zywall 5 series?
--
Lets Kick it...]]> http://www.dslreports.com/forum/remark,14764994 Wed, 09 Nov 2005 02:05:07 EDT Re: ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14702258 Shootist : DHCP still not working correctly. I'm wondering if it the 3COM integrated NICs in my notebooks. I'm going to run some tests with other PC and NICs.
See my post »"UPDATE" DHCP on Z5 Problem
--
Shooter Ready--Stand By BEEP ********]]> http://www.dslreports.com/forum/remark,14702258 Mon, 31 Oct 2005 19:58:22 EDT ZyWall 5 V4.00 (XD.2) released http://www.dslreports.com/forum/remark,14699309 Brano : Download: »ftp://ftp.zyxel.com/ZyWALL5UTM/firmwar···dard.zip

Features:

Modifications in V4.00(XD.2) | 10/26/2005
Modify for formal release.

Modifications in V4.00(XD.2)b2| 10/19/2005
1. [BUG FIX] 051013130
Symptom: Convert rom file from 3.64 to 4.00, Max. Concurrent session Per Host has
some problem.
Condition:
(1) Upgrade firmware from 3.64 to 4.00.
(2) In eWC->ADVANCE->NAT, Max. Concurrent Sessions Per Host is 6000, it should
be 4000.
2. [BUG FIX] 051014221, 051014222, 051014223
Symptom: Spelling error in eWC->Registration page.
Condition:
(1) In eWC->REGISTRATION-> Registration page, set two different passwords.
(2) Press "Apply" button, the status shows "Password and Confirm password are different".
(3) A word "differencet" spells error. It should be "different".
3. [BUG FIX]
AS fail count will not be increased even the real timeout occurs
4. [BUG FIX] 050928542, 051012075, 051012076, 051012077
Symptom: The added source IPs of Firewall rule will be lost.
Condition:
(1) Go to GUI->FIREWALL->RULE EDIT page.
(2) Edit a firewall rule.
(3) Add a source IP(or destination IP) that exceeds its maximum size(20 for ZW5).
(4) The added item will be lost.
5. [FEATURE CHANGE] 051018364 , 051018365, 051018366
In eWC->Registration page, change Username field behavior.
WAS: "-" character is not allowed to key in.
IS: "-" character is allowed to key in.
6. [BUG FIX] 051018403
Symptom: PPTP (GRE) cannot pass through NAT.
Condition:
PPTP
Server(192.168.1.33)--(LAN:192.168.1.1)DUT(WAN:192.168.11.100)--PC(192.168.1
1.200)
(1) Add PPTP Server(192.168.1.33) as Default Server in Port Forwarding
(2) Firewall is disabled.
(3) PC(192.168.11.200) can not dial in PPTP on 192.168.11.100
7. [BUG FIX] 051014198, 051014199, 051014200
Symptom: Use registration wizard to enable service, and last page wording error.
Condition:
(1) In eWC->HOME->Internet Access button, go to the last page.
(2) Registration status wording was wrong.

Modifications in V4.00(XD.2)b1| 10/08/2005
1. [BUG FIX] 050906259
Symptom: Disable bridge mode Firewall "Log Broadcast Frame". Broadcast logs
always appear.
Condition:
(1) In bridge mode, disable all Firewall -> Default Rule -> "Log Broadcast Frame".
(2) Broadcast logs always appear.
2. [BUG FIX] 050825052
Symptom: Tfgen tool causes router crash.
Condition:
(1) Use tfgen to send 40000 to 172.21.0.254 and turn it off.
(2) Use "dev chan disp enet3" to make sure the sending bit is 1.
(3) Unplug and plug wan2 and router will crash.
3. [BUG FIX]050912438
Symptom: Device will hang and reboot after "Email Log Now" in bridge mode.
Condition:
(1) Topology(Public IP): PC(211.72.158.115) ---
[LAN]ZW70_BridgeMode(211.72.158.116)[WAN] ---
Internet/MailServer/MailRecipient.
(2) Set the device as Bridge mode.
(3) Configure eWC->LOGS: "E-mail Log Settings".
(4) Click eWC->"Email Log Now" to send log mail.
(5) System will hang and then reboot by software watchdog.
4. [BUG FIX]050905192
Symptom: Anti-Spam causes memory leak in bridge mode.
Condition:
(1) Topology: Mail Client --- ZyWALL --- Mail Server
(2) Turn on Anti-Spam at ZyWALL (Bridge Mode).
(3) Mail Client sents mail to Mail Server. (You can try 500 mails with 2 attachments,
total size is about 30k).
(4) ZyWALL memory leaks.
5. [BUG FIX] 050922955
Symptom: After updating signature, sometimes the server IP address is incorrect in
centralized log.
Condition:
(1) In SMT 24.8, type "sys update signatureUpdate".
(2) After updating signature, type "sys log dis".
(3) Sometimes you can see a signature update log with incorrect server IP "127.0.0.1".
6. [ENHANCEMENT]
In eWC->FIREWALL->EDIT RULE page, we added the limitation on the number of
source ip address and destination ip address. The limitation is 20.
7. [ENHANCEMENT]
The device will not retry to update the signature if the update is triggered by user. Ex. CI
command "sys update signatureUpdate", "idp update start", "av update start" or
"Update Now" button in eWC.
8. [ENHANCEMENT]
In eWC>Anti-Spam>General>Action taken when mail sessions threshold is reached,
the wording of "Discard" will mislead user to think the system will "drop the mail"
when mail session reach the system's limit. In fact, the system doesn't drop the mail, it
just drop the mail connection until system have an available mail session to process
incoming connection. We replaced "Discard" with "Block" and the wording of "Block"
will be explained in web help and User's Guide by "System will Block this mail until a
mail session is available".
9. [BUG FIX]
Symptom: Sometimes device will crash when receiving special mails.
Condition:
Topology: Mail_Client --- ZyWALL --- Mail_Server
(1) ZyWALL turn on Anti-Spam, turn on external DB, threshold = 0.
(2) Mail_Client receive mail from Mail Server
(3) Sometimes ZyWALL will crash due to ”Data Abort”, ”not mbuf cookie”, ”mbuf
double free”, or mail did not tagged with spam string.
10. [BUG FIX] SPR ID: 050926383,050926384,050926385
Symptom: AS+AV Enable, it can’t send or receive mail if attached virus files.
Condition:
(1) AS and AV enable.
(2) AV General Setup select all.
(3) Send or receive a mail with attached virus files.
(4) It will can’t send or receive mail.
11. [BUG FIX] 051003282
Symptom: PC cannot transfer file from server (172.20.0.38)
Condition:
Topology: PC ---- ZyWALL(WAN:172.x.x.x)(Bridge/Router) --- trunk (172.20.0.38)
(1) Restore default romfile.
(2) PC get file from trunk, but it always fails after several seconds.
12. [BUG FIX] SPR ID: 050930643
Symptom: Edit NAT port forwarding default server = 192.168.1.33, then ping from
DUT2 to DUT1, it should show W to L logs, but it show W to W logs.
Condition: PC1-------LAN DUT1 WAN-------PQA LAB-----------WAN DUT2 LAN
(1) Set with CI commend ”sys romr|y”
(2) Edit web eWC/WAN/WAN1,My WAN IP Address =172.202.77.121,My WAN IP
Subnet Mask=255.255.0.0 ,Gateway IP Address=172.202.77.1
(3) Edit NAT port forwarding default server = 192.168.1.33, then ping from DUT2 to
DUT1, it should show W to L logs, but it show W to W logs.
-> If we telnet from DUT2 to DUT1, it shows W to L logs, and this right.
-> If we ping from DUT2 to DUT1, it shows W to W logs, but it should show W to
L logs.
13. [BUG FIX] 051003323
Symptom: NAT many one to one cannot work.
Condition:
(1) Edit web eWC/NAT/Address Mapping,WAN Interface =WAN2,Insert a Many
One-to-One rule (Local Start IP=192.168.1.41,Local End IP=192.168.1.42,Global
Start IP=192.168.12.100,Global End IP=192.168.12.101) on eWC/NAT/Address
Mapping page
(2) Set with CI command ”ip nat reset enif1”
(3) 192.168.12.110 do port scan 192.168.12.100(port 1-100) and 192.168.12.101(port
1-100)
(4) 192.168.1.41 and 192.168.1.42 cannot capture all port scan packets.
14. [BUG FIX] 050930647
Symptom: Some mails should have SPAM tag or NoScore tag but they didn't have any
tag
Condition:
(1) Enable AS
(2) eWC->AS->ExternalDB-: Enable external DB, set the threshold=0, fill the tag for no
spam score
(3) MS Outlook Express received a lot of mails from the mail server
(4) Some mails did not have any Spam/No Score tag.
15. [FEATURE CHANGE]
WAS: Allow timeouted ConeNAT session to recreate NAT session from WAN to LAN.
IS: Do not allow timeouted ConeNAT session traffic to recreate NAT session from
WAN to LAN
]]> http://www.dslreports.com/forum/remark,14699309 Mon, 31 Oct 2005 13:15:10 EDT