From: Andre Tomt <andre@tomt.net>
To: Rohit Neupane <rohitneupane@gmail.com>,
Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
Subject: Re: Weird Problem with TCP
Date: Mon, 06 Sep 2004 02:40:32 +0200 [thread overview]
Message-ID: <413BB200.4010708@tomt.net> (raw)
In-Reply-To: <93e09f0104090206334a708289@mail.gmail.com>
Rohit Neupane wrote:
> No, it is not running any session tracking (ip_conntrack) neither it
> does nat. It is just a firewall with around 1600 rules in FORWARD
> mangle table and around 1500 rules in FORWARD filter table. Out of
> 1500 rules , 1377 rules are MAC filter rules.
> And it had 3 alias address for the interface conneted to the wirelss.
Ouch. Thats a lot of rules to traverse for each packet. Segment them
into chains if possible. Also you may want to take a look at nf-hipac,
http://www.hipac.org
--
André Tomt
next prev parent reply other threads:[~2004-09-06 0:42 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-09-02 9:21 Weird Problem with TCP Rohit Neupane
2004-09-02 10:56 ` Alan Cox
2004-09-02 13:33 ` Rohit Neupane
2004-09-02 15:06 ` Stuart Young
2004-09-05 21:46 ` Denis Vlasenko
[not found] ` <41372F3A.4040301@zianet.com>
2004-09-02 15:10 ` Rohit Neupane
2004-09-06 0:40 ` Andre Tomt [this message]
[not found] ` <1094168287.4025.35.camel@mentorng.gurulabs.com>
2004-09-03 3:07 ` Rohit Neupane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=413BB200.4010708@tomt.net \
--to=andre@tomt.net \
--cc=alan@lxorguk.ukuu.org.uk \
--cc=linux-kernel@vger.kernel.org \
--cc=rohitneupane@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox