For those who still use old KPF v2.1.5 ...
Links: home · search · speed test · login · more ·

 
Links: Reply New Topic
Forums » Security » Security » For those who still use old KPF v2.1.5 ...
page: 1 · 2
antdude @ 3rd Nov 10:50AM:
For those who still use old KPF v2.1.5 ...

Do you get blue screen from XP rarely? I get them once in a while and rarely on my old, updated Windows XP Pro. SP3 machine. It usually happens when I am downloading datas like streaming videos, downloading files, etc.

I ran WinDbg and saw:

Thank you in advance. :)

--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
shearer @ 4th Nov 09:02AM:
Re: For those who still use old KPF v2.1.5 ...

I've used Kerio 2.1.5 since 2003, and have only had a fwdrv.sys BSOD once. When I move to Win7 x64 in probably 2-3 years' time, I will sorely miss this app.
reply
antdude @ 4th Nov 09:11AM:
Re: For those who still use old KPF v2.1.5 ...

said by shearer :

I've used Kerio 2.1.5 since 2003, and have only had a fwdrv.sys BSOD once.
Interesting. Do you recall what your PC was doing that time? Downloading something?
reply
Sentinel @ 4th Nov 09:16AM:
Re: For those who still use old KPF v2.1.5 ...

I use it on 6 PCs which are all running XP. I have no problems at all. When I get a new PC I assume I will have to get it with Win7 on it and I will really be in a tough spot to replace this firewall :(
--
Who is John Galt?

reply
antdude @ 4th Nov 09:26AM:
Re: For those who still use old KPF v2.1.5 ...

said by Sentinel :

I use it on 6 PCs which are all running XP. I have no problems at all. When I get a new PC I assume I will have to get it with Win7 on it and I will really be in a tough spot to replace this firewall :(
I hope therer's a nother good one like it by the time I go to Windows 7 whenever that is (not any time soon).
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
redwolfe_98 @ 4th Nov 09:51AM:
Re: For those who still use old KPF v2.1.5 ...

i use kerio 2.15 with winxpsp3 and i have never had any BSOD's relating to kerio..

if you are using any "nvidia" products, i would guess that the problem might be related, somehow, to nvidia drivers..
reply
antdude @ 4th Nov 10:02AM:
Re: For those who still use old KPF v2.1.5 ...

said by redwolfe_98 :

i use kerio 2.15 with winxpsp3 and i have never had any BSOD's relating to kerio..

if you are using any "nvidia" products, i would guess that the problem might be related, somehow, to nvidia drivers..
I used to have NVIDIA drivers due to NForce and video cards, but not anymore.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
redwolfe_98 @ 4th Nov 10:17AM:
Re: For those who still use old KPF v2.1.5 ...

antdude, looking at the debug-log that you posted, it looks like the problem is, or might be, related to "Champions Online.exe", in your firewall-rules.. the debug-log reports that the "symbol" for "Champions Online.exe" could not be loaded..

if it was me, i would try different things, to try to resolve the problem:

removing the rule for "Champions Online.exe", and the "MD5 signature" for it, as well, and then recreating a rule for "Champions Online.exe"..

reinstalling the program that generated the "Champions Online.exe" file

maybe trying changing the "Champions Online.exe"-file's icon, if that was possible..
reply
antdude @ 4th Nov 10:38AM:
Re: For those who still use old KPF v2.1.5 ...

said by redwolfe_98 :

antdude, looking at the debug-log that you posted, it looks like the problem is, or might be, related to "Champions Online.exe", in your firewall-rules.. the debug-log reports that the "symbol" for "Champions Online.exe" could not be loaded..

if it was me, i would try different things, to try to resolve the problem:

recreating a rule for "Champions Online.exe"..

reinstalling the program that generated the "Champions Online.exe" file

maybe trying changing the "Champions Online.exe"-file's icon, if that was possible..
I have seen it with other network programs like seamonkey.exe, orbitdm.exe, in the past.
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
Ender3rd @ 4th Nov 11:50AM:
Re: For those who still use old KPF v2.1.5 ...

I am a long time user of Kerio 2.1.5 and currently have it running on 4 different XP/SP2 machines. I had blue screen issues that resulted from Kerio's interactions with the drivers for an Intel integrated LAN device on a P4C800E board by ASUS. After trying several different Intel drivers without success I disabled the onboard LAN adapter and installed a D-Link PCI adapter and never had another problem like that.

The only other issue I see with Kerio happens on my gaming machine. In the middle of online multiplayer games such as COD4, if punkbuster decides to update itself, the Kerio MD5 checker will stall the game to ask if I want to accept the new punkbuster file. I never found a way to circumvent that problem, other than to disable the firewall before gaming, which was not an optimal solution. So... that machine now runs the XP firewall with no outbound protection (unfortunately).
--
My Jeep is not an SUV. Your SUV is not a Jeep.

reply
SafireDonkey @ 4th Nov 11:57AM:
Re: For those who still use old KPF v2.1.5 ...

I get your BSOD's also once in a while, let's say once every month, but I prefered to live with 1 BSOD/month instead of a bloated and constant system slowing firewall. :D
reply
antdude @ 4th Nov 02:15PM:
Re: For those who still use old KPF v2.1.5 ...

said by SafireDonkey :

I get your BSOD's also once in a while, let's say once every month, but I prefered to live with 1 BSOD/month instead of a bloated and constant system slowing firewall. :D
Interesting so I am not alone. Yeah, annoying. Does it happen when you download or something? Too bad Kerio ended support many years ago. :( I haven't found a good light and simple firewall to replace it (only need to block incoming and outgoing). I miss Conseal PC Firewall on my 9x machines. :D
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
redwolfe_98 @ 4th Nov 03:48PM:
Re: For those who still use old KPF v2.1.5 ...

isn't "lock-n-stop" supposed to be similar to kerio? could we use that as a substitute for kerio 2.15?

i am going to need to find a decent replacement for kerio 2.15, too..
reply
Blue2 @ 4th Nov 05:04PM:
Re: For those who still use old KPF v2.1.5 ...

said by shearer :

I've used Kerio 2.1.5 since 2003, and have only had a fwdrv.sys BSOD once.
I had it a few times, and it did seem to happen when I was dl'ing and so the firewall was overtaxed. If I remember correctly, increasing the MaxBufferSize in HKLM\System\ControlSet003\Services\fwdrv corrected it.

Here's a few goggle results on it: »www.google.fr/search?hl=en&safe=···aq=f&oq=
reply
shearer @ 4th Nov 09:52PM:
Re: For those who still use old KPF v2.1.5 ...

said by antdude :

said by shearer :

I've used Kerio 2.1.5 since 2003, and have only had a fwdrv.sys BSOD once.
Interesting. Do you recall what your PC was doing that time? Downloading something?
Mine occurred sometime in 2005. Was surfing web with IE6, clicked on a link and BSODed. I was thinking maybe some conflict with my Netgear WG311v2 PCI wireless adapter driver, but I'm still with this card today and the BSOD never did happen again.

I scouted for alternatives and Look N' Stop seems to be the most suitable candidate for a successor. But let me admit that I'm hopelessly in love with Kerio's simplistic & beautiful interface and no other fw app (including LnS) comes close to Kerio in this aspect.
reply
antdude @ 4th Nov 09:58PM:
Re: For those who still use old KPF v2.1.5 ...

said by shearer :

said by antdude :

said by shearer :

I've used Kerio 2.1.5 since 2003, and have only had a fwdrv.sys BSOD once.
Interesting. Do you recall what your PC was doing that time? Downloading something?
Mine occurred sometime in 2005. Was surfing web with IE6, clicked on a link and BSODed. I was thinking maybe some conflict with my Netgear WG311v2 PCI wireless adapter driver, but I'm still with this card today and the BSOD never did happen again.

I scouted for alternatives and Look N' Stop seems to be the most suitable candidate for a successor. But let me admit that I'm hopelessly in love with Kerio's simplistic & beautiful interface and no other fw app (including LnS) comes close to Kerio in this aspect.
Yep, whatever happened to that open source clone? Did that project die?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
redwolfe_98 @ 5th Nov 06:44AM:
Re: For those who still use old KPF v2.1.5 ...

antdude, did you look at some of the articles on that google-webpage that "blue2" posted? the articles discussed tweaking a regkey, to increase "maxbuffersize".. you could look into that.. i think i might try applying that tweak, myself..
reply
The Snowman @ 5th Nov 07:00AM:
Re: For those who still use old KPF v2.1.5 ...



If you need to find out what the correct buffer size would be try doing a search......microsoft has a webpage on the proper buffer size.

reply
SafireDonkey @ 5th Nov 08:46AM:
Re: For those who still use old KPF v2.1.5 ...

said by antdude :

Interesting so I am not alone. Yeah, annoying. Does it happen when you download or something? Too bad Kerio ended support many years ago. :( I haven't found a good light and simple firewall to replace it (only need to block incoming and outgoing). I miss Conseal PC Firewall on my 9x machines. :D
Sorry for the late reply. It doesn't specifically happen when downloading, sometimes it happens just BANG! while I'm actually doing nothing browsing related. Just at random.
I just found, using ProcMon, that it makes Explorer.exe constantly digging the same locations in registry and disk. Don't know your case, but I use a fairely large (200kb) HOSTS file, but I really don't know if it would be related to that.

Lately I have been using Comodo firewall (something which I once concluded to never ever use their softwares on my system) in a virtual machines, and honestly, it runs extremely light, and does the job very well. Allthough it doesn't have to easy way of creating particular program based rules as Kerio had, takes a whole lot more clicking and searching to do as Kerio, but I'm actually thinking about finally making a switch and kiss my good old Kerio 2.1.5 goodbye.

About the MaxBufferSize registry tweak, I remember my BSOD's started happening some years ago AFTER I increased that registry value.
reply
Blue2 @ 5th Nov 08:47AM:
Re: For those who still use old KPF v2.1.5 ...

said by redwolfe_98 :

antdude, did you look at some of the articles on that google-webpage that "blue2" posted? the articles discussed tweaking a regkey, to increase "maxbuffersize".. you could look into that.. i think i might try applying that tweak, myself..
This reg tweak was even suggested at the old Kerio website and they indicated 12,000 or higher, while other sites suggested 16,000. I did some experimenting and finally settled on 20,000 and it did not happen ever again after that.

Here is the original notice that I copied from the old Kerio website:

"Fatal Application Exit : Kerio Personal Firewall Driver: BufferAllocate: BufferSize (8814) >
MaxBufferSize (8192) - Increase buffer size" What is this error message and how do I fix it?
This typically means that the KPF engine is receiving more data than it can process and the driver buffer
becomes full. This is not normal behavior. If you receive this error you should first verify that there is not a
problem with the network, and that your PC meets the minimum system requirements for your Operating System.
Alternatively, you can manually increase the KPF buffer from the registry:
HKLM\SYSTEM\CurrentControlSet\Services\fwdrv. Modify 'MaxBufferSize' to some higher amount (e.g. 12000)."
reply
antdude @ 5th Nov 08:58AM:
Re: For those who still use old KPF v2.1.5 ...

Sorry for the late reply. It doesn't specifically happen when downloading, sometimes it happens just BANG! while I'm actually doing nothing browsing related. Just at random.
I just found, using ProcMon, that it makes Explorer.exe constantly digging the same locations in registry and disk. Don't know your case, but I use a fairely large (200kb) HOSTS file, but I really don't know if it would be related to that.
I also use a big hosts file too, but from Spybot. Currently, it is over 310 KB.

Who else use(s/d) a big hosts file with KPF with BSoDs?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
antdude @ 5th Nov 09:03AM:
Re: For those who still use old KPF v2.1.5 ...

said by Blue2 :

said by redwolfe_98 :

antdude, did you look at some of the articles on that google-webpage that "blue2" posted? the articles discussed tweaking a regkey, to increase "maxbuffersize".. you could look into that.. i think i might try applying that tweak, myself..
This reg tweak was even suggested at the old Kerio website and they indicated 12,000 or higher, while other sites suggested 16,000. I did some experimenting and finally settled on 20,000 and it did not happen ever again after that.

Here is the original notice that I copied from the old Kerio website:

"Fatal Application Exit : Kerio Personal Firewall Driver: BufferAllocate: BufferSize (8814) >
MaxBufferSize (8192) - Increase buffer size" What is this error message and how do I fix it?
This typically means that the KPF engine is receiving more data than it can process and the driver buffer
becomes full. This is not normal behavior. If you receive this error you should first verify that there is not a
problem with the network, and that your PC meets the minimum system requirements for your Operating System.
Alternatively, you can manually increase the KPF buffer from the registry:
HKLM\SYSTEM\CurrentControlSet\Services\fwdrv. Modify 'MaxBufferSize' to some higher amount (e.g. 12000)."
I have seen that error before and rarely. It usually caused by some programs, but don't remember which ones. That could be related to those rare blue screens. I changed its default 64294 to 20000 in my HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\fwdrv. Do I need to reboot for this to take an effect?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
antdude @ 5th Nov 09:04AM:
Re: For those who still use old KPF v2.1.5 ...

said by Blue2 :

said by shearer :

I've used Kerio 2.1.5 since 2003, and have only had a fwdrv.sys BSOD once.
I had it a few times, and it did seem to happen when I was dl'ing and so the firewall was overtaxed. If I remember correctly, increasing the MaxBufferSize in HKLM\System\ControlSet003\Services\fwdrv corrected it.

Here's a few goggle results on it: »www.google.fr/search?hl=en&safe=···aq=f&oq=
Thanks. I am trying 20000. Do you remember what you used in the past?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer

reply
Blue2 @ 5th Nov 09:11AM:
Re: For those who still use old KPF v2.1.5 ...

I'm not a registry expert, but I'd imagine that you'd have to reboot for the change to be registered.

In all the time I've used Kerio I've only had two very specific problems and each was resolvable.

The first were these errant Fatal Application Errors caused by the fwdrv buffer overflow, which other users reported as a BSOD. After I upped the buffer size, I never had them again.

The second was when running under W98 which was a lot more unstable than XP, occassionally I'd crash while in the process of downloading and Kerio was doing a lot of filtering. Upon reboot, my ruleset was gone and replaced by the original generic ruleset. So I've got my ruleset backed up elsewhere, but under XP that has never been an issue.

Edit: Just saw your additional question. I tried 16,000, had another Fatal Application Error, and upped it again to 20,000. I imagine that firewalls have to do a lot more filtering these days then when KPF 2.15 was initially written.
reply

Thank you for using lo-fi dslreports.com - report bugs
© 99-2009 silver matrix LLC