Re: slow ftp

[Askar <askarali@gmail.com>]

hello Dufresne,

Problem solved after I added ...
     UseReverseDNS                   off
     IdentLookups                    off

to proftpd.conf as Michael Gale suggested

Thanks and regards

Askar 
On Thu, 17 Feb 2005 12:51:56 -0500 (EST), R. DuFresne
<dufresne@sysinfo.com> wrote:
> 
> What kind of latencies are you observing?  any time one puts a firewall
> into the miix, or encryption there is agont to be an increase in latency.
> Add state tracking and increase the latency level, add large rules sets,
> and increase the latency level, ftp via ssh'ed connections, add latency,
> hope from one system to another hitting firewall boundries and adding
> ssh'ed connections up the latency level.  Try and connect to a server that
> is running with a sysload on the high end, add latency as the remote
> server needs to deal with interupts.
> 
> The question though is, are the latencies you are observing out of norm?
> <see question 1 above>
> 
> Thanks,
> 
> Ron DuFresne
> 
> On Thu, 17 Feb 2005, Askar wrote:
> 
> > hi list
> >
> > we are running ftp "proftpd" server it takes times when a user
> > connects to ftp server however when I flush the iptables rules
> > connection doesn't takes time, iptables firewall on the same machine,
> > default policies are DROP,
> > firewall script is very straight forward
> >
> > rules
> > .
> > .
> > # Using Connection State to By-pass Rule Checking
> > iptables -A INPUT  -m state --state ESTABLISHED,RELATED -j ACCEPT
> > iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
> > .
> > .
> > .iptables -A INPUT -p tcp --dport 20:21 -m state --state NEW -j ACCEPT
> > .
> > .
> >
> > # Load the FTP connection state helper module.
> > modprobe ip_conntrack_ftp
> > # Load the FTP NAT module.
> > modprobe ip_nat_ftp
> >
> > any idea?
> >
> > regards
> >
> >
> 
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>         admin & senior security consultant:  sysinfo.com
>                         http://sysinfo.com
> 
> ...Love is the ultimate outlaw.  It just won't adhere to rules.
> The most any of us can do is sign on as it's accomplice.  Instead
> of vowing to honor and obey, maybe we should swear to aid and abet.
> That would mean that security is out of the question.  The words
> "make" and "stay" become inappropriate.  My love for you has no
> strings attached.  I love you for free...
>                         -Tom Robins <Still Life With Woodpecker>
> 
> 


-- 
I love deadlines. I like the whooshing sound they make as they fly by.
Douglas Adams