Hi,

I\'m getting checksum / signature errors on downloads. After a few tries at satisfying work requests the server says I\'ve exceeded quota and quits for 24 hours. This wasn\'t happening when I first started out. I joined this project when Grid.org closed. Later I added seti@home Both projects are doing this. The last change I made was to add CA firewall. I suspect it may be causing this but its very odd. No other downloads are affected and may of the CA firewall protections are disabled. Web bug blocking is still on. UDP blocking was on. Its now off. BOINC is named as a privileged application and I gave it full access rights at least for now.

I\'m considering changing out the firewall for a different one but temporarily I need to be careful as my computer is also a server part time with a public IP.

Any thoughts? Have you heard of this problem before>

Thanks in advance.

---

Firewalls do sometimes cause this sort of problem. I briefly used the CA firewall some time ago (before I\'d heard of Boinc), and didn\'t have much luck with it (moved to ZoneAlarm instead).

The following post does talk about firewall configuration:

http://www.climateprediction.net/board/viewtopic.php?t=4272

---

I'm a volunteer and my views are my own.
News and Announcements and FAQ

Firewalls do sometimes cause this sort of problem. I briefly used the CA firewall some time ago (before I\'d heard of Boinc), and didn\'t have much luck with it (moved to ZoneAlarm instead).

The following post does talk about firewall configuration:

http://www.climateprediction.net/board/viewtopic.php?t=4272

Thank you. I have granted access permissions to all of the .exe\'s in the BOINC directory. We\'ll see what happens and I\'ll post back.

---

Firewalls do sometimes cause this sort of problem. I briefly used the CA firewall some time ago (before I\'d heard of Boinc), and didn\'t have much luck with it (moved to ZoneAlarm instead).

The following post does talk about firewall configuration:

http://www.climateprediction.net/board/viewtopic.php?t=4272

Thank you. I have granted access permissions to all of the .exe\'s in the BOINC directory. We\'ll see what happens and I\'ll post back.

It did it again this morning.

5/24/2007 2:45:05 AM|SETI@home|Deferring communication for 1 min 0 sec
5/24/2007 2:45:05 AM|SETI@home|Reason: Unrecoverable error for result 18fe05ab.18643.8928.347162.3.91_2 (WU download error: couldn\'t get input files:<file_xfer_error> <file_name>18fe05ab.18643.8928.347162.3.91</file_name> <error_code>-200</error_code></file_xfer_error>)
5/24/2007 2:46:08 AM|SETI@home|Sending scheduler request: To fetch work
5/24/2007 2:46:08 AM|SETI@home|Requesting 1728 seconds of new work, and reporting 1 completed tasks
5/24/2007 2:46:53 AM|SETI@home|Scheduler RPC succeeded [server version 509]
5/24/2007 2:46:53 AM|SETI@home|Deferring communication for 11 sec
5/24/2007 2:46:53 AM|SETI@home|Reason: requested by project
5/24/2007 2:46:55 AM|SETI@home|[file_xfer] Started download of file 20mr05aa.7494.5778.261086.3.142
5/24/2007 2:47:05 AM|SETI@home|[file_xfer] Finished download of file 20mr05aa.7494.5778.261086.3.142
5/24/2007 2:47:05 AM|SETI@home|[file_xfer] Throughput 42936 bytes/sec
5/24/2007 2:47:05 AM|SETI@home|[error] Checksum or signature error for 20mr05aa.7494.5778.261086.3.142
5/24/2007 2:47:06 AM|SETI@home|Deferring communication for 1 min 0 sec
.
.
This is SETI but its doing the same thing on climteprediction as well.
It tries 4 times and then backs off for each project. If anyone else has seen this or if you have any further suggestions please let me know. I can be crunching a lot more work than I am as I have a 4 cpu 3GB system x 1.6 Terabytes disk. Right now I\'m only crunching one climatepred task that got through before this problem popped up.

---

A question that I forgot to ask is : Do you connect to the internet via a proxy server? This would usually be \'yes\' if it\'s a work computer or via a university network (usually \'no\' if it\'s a home PC).

---

I'm a volunteer and my views are my own.
News and Announcements and FAQ

A question that I forgot to ask is : Do you connect to the internet via a proxy server? This would usually be \'yes\' if it\'s a work computer or via a university network (usually \'no\' if it\'s a home PC).

Its a work computer but I\'m self employed. I have my own static IP address and my own equipment and software. No proxy server.

Climatepred will try again in 5 hrs. I\'m going to drop the firewall before it tries to connect to see if that helps. From a technical point of view I\'m skeptical. A firewall should really not be bothering a checksum or a signature as it is just another piece of data in a packet. No other (FTP style) downloads I\'ve done are bothered by it. The only reason I\'m focusing on the firewall at all is that the addition of CA firewall and anti-spyware are the only real changes I\'ve made to the system that I can think of since I installed BOINC. Before that I had just windows firewall running with CA anti-virus. There is also a hardware Cisco firewall on the line operating in passive mode but BOINC was working OK with that box when I first installed it. The CISCO box isn\'t looking at the data, just network routing info.

Is the checksum stored separately from the data in BOINC transfers? I\'m passing private headers so its not likely a problem if the cheksum is stored in one of those. Notice in the message stream I pasted earlier in this thread that the file actually does transfer but the checksum or signature compare is wrong after the transfer is done. I\'m not getting significant errors on my 416kb DSL line. I also haven\'t seen any notices that CA anti-spyware or anti-virusware is trying to \"fix\" the data but just to be sure I\'ll drop those screener functions momentarily also.

Very puzzling.

---

Yesterday I suspended the projects and put a stop on accepting new work because of of the weather conditions. T storms can cause major damage where I live so I shut down when these events come up. This morning I dropped the firewall, enabled the projects, and let climatepred accept some work. No checksum errors! Enabled the firewall and started getting errors. So the firewall IS causing the problem. Now I just need to know what else I have to set in its rules besides execute permissions for BOINC exe programs.

Again, any other thoughts on this would be appreciated. I have looked in the firewall log and most connections were allowed in the time period. The few that were blocked look like they should be blocked but I\'ll studying the log further as I get the chance.

At least now I know of one way to get more work for the project. Progress..

---

Yesterday I suspended the projects and put a stop on accepting new work because of of the weather conditions. T storms can cause major damage where I live so I shut down when these events come up. This morning I dropped the firewall, enabled the projects, and let climatepred accept some work. No checksum errors! Enabled the firewall and started getting errors. So the firewall IS causing the problem. Now I just need to know what else I have to set in its rules besides execute permissions for BOINC exe programs.

Again, any other thoughts on this would be appreciated. I have looked in the firewall log and most connections were allowed in the time period. The few that were blocked look like they should be blocked but I\'ll studying the log further as I get the chance.

At least now I know of one way to get more work for the project. Progress..

Here you go

80 (http for server communication)
443 (https for server communication)
31416 (loopback address for manager - client communication)


BOINC.exe needs 31416 and 80 and 443 opened
BOINCmgr.exe needs 31416 opened
BOINC.scr needs 31416 opened

---

Kathryn :o)
The BOINC FAQ Service
The Unofficial BOINC Wiki
The Trac System
More BOINC information than you can shake a stick of RAM at.

Yesterday I suspended the projects and put a stop on accepting new work because of of the weather conditions. T storms can cause major damage where I live so I shut down when these events come up. This morning I dropped the firewall, enabled the projects, and let climatepred accept some work. No checksum errors! Enabled the firewall and started getting errors. So the firewall IS causing the problem. Now I just need to know what else I have to set in its rules besides execute permissions for BOINC exe programs.

Again, any other thoughts on this would be appreciated. I have looked in the firewall log and most connections were allowed in the time period. The few that were blocked look like they should be blocked but I\'ll studying the log further as I get the chance.

At least now I know of one way to get more work for the project. Progress..

Here you go

80 (http for server communication)
443 (https for server communication)
31416 (loopback address for manager - client communication)


BOINC.exe needs 31416 and 80 and 443 opened
BOINCmgr.exe needs 31416 opened
BOINC.scr needs 31416 opened

Thank you very much. That\'s what I needed. Have a good holiday weekend.

---

Hi Everyone,

I\'ve put all the IP rules into the firewall and the checksum problem persisted.

I tried one more thing. I took down the personal ID screener in the
personal protections part of it (which was set almost non-functional anyway) and and dropped the Web Bug filter.

The problem went away. So now I have to isolate between those two things.
I will narrow down exactly what it is and post it here so others might not have to go through this.

progress!

---

Yesterday I suspended the projects and put a stop on accepting new work because of of the weather conditions. T storms can cause major damage where I live so I shut down when these events come up. This morning I dropped the firewall, enabled the projects, and let climatepred accept some work. No checksum errors! Enabled the firewall and started getting errors. So the firewall IS causing the problem. Now I just need to know what else I have to set in its rules besides execute permissions for BOINC exe programs.

Again, any other thoughts on this would be appreciated. I have looked in the firewall log and most connections were allowed in the time period. The few that were blocked look like they should be blocked but I\'ll studying the log further as I get the chance.

At least now I know of one way to get more work for the project. Progress..

Here you go

80 (http for server communication)
443 (https for server communication)
31416 (loopback address for manager - client communication)


BOINC.exe needs 31416 and 80 and 443 opened
BOINCmgr.exe needs 31416 opened
BOINC.scr needs 31416 opened

Thank you very much. That\'s what I needed. Have a good holiday weekend.

I\'ve finally narrowed this one down as far as I can.

In CA firewall, Web Bugs blocking MUST be turned off. Apparently the checksum looks like a web bug to the filter (a 1x1 pixel image often used for tracking (spyware)). Private headers MUST ALSO be allowed to pass.

I can do this filtering in my browsers so there\'s no hard requirement to do them in the firewall.

If you know enough about what\'s going on with BOINC (it looks like you do from your writeup) and you know how to get these additional rules permanently added somewhere to the official rules list I think it might help a few others. Thanks again for your time and the support of everyone who responded to this thread for me.

---

Well done for pinning it down :-), I\'ve added the information about allowing web bugs and private headers onto the \'configuring firewalls\' thread.

---

I'm a volunteer and my views are my own.
News and Announcements and FAQ

Well done for pinning it down :-), I\'ve added the information about allowing web bugs and private headers onto the \'configuring firewalls\' thread.

Thank you!

---