From: "Jörg Harmuth" <harmuth@mnemon.de>
To: netfilter@lists.netfilter.org
Subject: Re: Fwd: Re: IP Tables slows network response times
Date: Mon, 15 Aug 2005 12:53:34 +0200 [thread overview]
Message-ID: <4300742E.6050307@mnemon.de> (raw)
In-Reply-To: <200508152205.09409.michael@networkstuff.co.nz>
Michael Hallager schrieb:
> 1. I have tried both IN and OUT and I am not seeing any error messages or
> anything *obvious*
>
> 2. With those FW rules in place I can do NSLOOKUP on the domain anme with no
> problems.
Humm, strange. Could you please provide the output of iptables-save as
Rob said ?
Some time ago, I had a similar problem with slow responses (~30s delay).
It turned out that it was identd, as Grant assumed in your case too.
Adding a rule like
iptables -A OUTPUT -p tcp --dport 113 -j REJECT \
--reject-with tcp-reset
solved this for me. I don't know the Slackware distro, but it seems,
that they use sendmail. If this is true, it is quite likely that identd
causes the trouble (at least it was true for me on one box).
Have a nice time,
Joerg
next prev parent reply other threads:[~2005-08-15 10:53 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-08-14 17:39 IP Tables slows network response times Gary W. Smith
2005-08-14 18:00 ` Nikolai Geogriev
2005-08-15 8:18 ` Fwd: " Michael Hallager
2005-08-15 9:32 ` Jörg Harmuth
2005-08-15 9:45 ` Michael Hallager
2005-08-15 9:59 ` /dev/rob0
2005-08-15 10:10 ` Michael Hallager
2005-08-15 9:46 ` /dev/rob0
2005-08-15 10:05 ` Michael Hallager
2005-08-15 10:53 ` Jörg Harmuth [this message]
2005-08-15 11:04 ` Michael Hallager
2005-08-15 11:21 ` /dev/rob0
-- strict thread matches above, loose matches on Subject: below --
2005-08-15 11:07 Michael Hallager
2005-08-15 11:32 Michael Hallager
2005-08-15 11:59 ` Eric Leblond
2005-08-15 13:13 ` /dev/rob0
2005-08-15 15:35 ` Jörg Harmuth
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4300742E.6050307@mnemon.de \
--to=harmuth@mnemon.de \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.