Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 09:00:22AM -0800, Terry Lambert wrote: > > I noticed that port 53 UDP (yes, UDP) gets through fine, though. > > > Try disabling delayed ACK in the TCP stack; it's a sysctl. > > -- Terry Been there, done that. No difference though. Jiawei -- "Without the userland, the k

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread Terry Lambert
leafy wrote: > On Thu, Mar 06, 2003 at 11:22:29PM +0800, leafy wrote: > > On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: > > > Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution > > > for sshd (which happened no matter what the configuration said) run > > All,

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 11:22:29PM +0800, leafy wrote: > On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: > > Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution > > for sshd (which happened no matter what the configuration said) run > All, including ssh. Only IC

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread leafy
On Thu, Mar 06, 2003 at 11:28:45AM -0300, Daniel C. Sobral wrote: > Are you sure _all_ socket calls are slow? 5.0-R had reverse resolution > for sshd (which happened no matter what the configuration said) run All, including ssh. Only ICMP responds in time. > connection arrives). If blackhole or fi

Re: IPFILTER broken as of world/kernel a few hours old

2003-03-06 Thread Daniel C. Sobral
leafy wrote: > With IPFILTER enabled in the kernel, all socket(2) calls > inbound/outbound are very slow. A normal SSH connection within the > same subnet takes 5 minutes to connect. Anything I can provide to pin > down the problem? Are you sure _all_ socket calls are slow? 5.0-R had reverse reso

IPFILTER broken as of world/kernel a few hours old

2003-03-04 Thread leafy
With IPFILTER enabled in the kernel, all socket(2) calls inbound/outbound are very slow. A normal SSH connection within the same subnet takes 5 minutes to connect. Anything I can provide to pin down the problem? Jiawei -- "Without the userland, the kernel is useless."