Re: iptables and performance issues

2002-12-27 Thread Cliff Wells
On Mon, 2002-12-23 at 08:02, Ben Russo wrote: > On Fri, 2002-12-20 at 13:02, lester lasad wrote: > > Thanks for the responses. Regarding the name resolution is it looking > > for itself, the local machine? The command below "iptables -L-n -V" > > just lists the version of iptables, nothing else.

Re: iptables and performance issues

2002-12-23 Thread Michael Schwendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 23 Dec 2002 13:21:53 -0500, Hal Burgiss wrote: > On Mon, Dec 23, 2002 at 12:51:51PM -0500, James Pifer wrote: > > Every takes longer to run. With iptables loaded webmin takes 30 > > seconds load a page. With iptables off it's immediate. > >

Re: iptables and performance issues

2002-12-23 Thread Hal Burgiss
On Mon, Dec 23, 2002 at 12:51:51PM -0500, James Pifer wrote: > Every takes longer to run. With iptables loaded webmin takes 30 seconds > load a page. With iptables off it's immediate. You are not blocking localhost connections are you? Just a thought ... I don't know what that would do, but worth

Re: iptables and performance issues

2002-12-23 Thread Michael Schwendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23 Dec 2002 12:51:51 -0500, James Pifer wrote: > Every takes longer to run. With iptables loaded webmin takes 30 > seconds load a page. With iptables off it's immediate. > > Same with applications in x windows. With iptables loaded xterm takes >

Re: iptables and performance issues

2002-12-23 Thread James Pifer
Every takes longer to run. With iptables loaded webmin takes 30 seconds load a page. With iptables off it's immediate. Same with applications in x windows. With iptables loaded xterm takes 15 seconds to load, while it load immediately with iptables either unloaded or the rules flushed. My /etc/

Re: iptables and performance issues

2002-12-23 Thread Michael Schwendt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23 Dec 2002 07:42:30 -0500, James Pifer wrote: > Hi Bret. Yes that is the same thread. Slowness when doing -L just > seems to be a symptom of the same problem. Anyone else have any > information that might help? "iptables -L" does DNS lookups whil

Re: iptables and performance issues

2002-12-23 Thread Ben Russo
On Fri, 2002-12-20 at 13:02, lester lasad wrote: > Thanks for the responses. Regarding the name resolution is it looking > for itself, the local machine? The command below "iptables -L-n -V" > just lists the version of iptables, nothing else. Doing "iptables > -nL" gave a much quicker response.

Re: iptables and performance issues

2002-12-23 Thread James Pifer
Hi Bret. Yes that is the same thread. Slowness when doing -L just seems to be a symptom of the same problem. Anyone else have any information that might help? Thanks, James On Sun, 2002-12-22 at 23:09, Bret Hughes wrote: > On Sun, 2002-12-22 at 21:12, James Pifer wrote: > > Anyone else have anyth

Re: iptables and performance issues

2002-12-22 Thread Bret Hughes
On Sun, 2002-12-22 at 21:12, James Pifer wrote: > Anyone else have anything to add to this or can anyone give more detail > on how this is a DNS issue? I have a very similar problem as the > original poster. > If this is the thread I respondeed to, I thought his issue was that the -L was taking a

Re: iptables and performance issues

2002-12-22 Thread James Pifer
Anyone else have anything to add to this or can anyone give more detail on how this is a DNS issue? I have a very similar problem as the original poster. I have two Redhat 8.0 machines, one has this same problem while the other one does not. Both have the same DNS settings, ie they hit the same DN

Re: iptables and performance issues

2002-12-20 Thread lester lasad
Thanks for the responses.  Regarding the name resolution is it looking for itself, the local machine?  The command below "iptables -L-n -V" just lists the version of iptables, nothing else.  Doing "iptables -nL" gave a much quicker response.  The main problem is that everything is slow after loadi

Re: iptables and performance issues

2002-12-20 Thread Jack Bowling
On Fri, Dec 20, 2002 at 05:59:23AM -0800, lester lasad wrote: > > I am running redhat 7.3 everything is working properly until loading the iptables >rules. After loading the rules I am taking a big performance hit. It can take >anywhere from 10 - 30 seconds for my server to display the result

Re: iptables and performance issues

2002-12-20 Thread Mike Burger
iptables -L will try to reverse resolve IPs to FQDNs...you're probably seeing a delay due to the DNS query time outs. On Fri, 20 Dec 2002, lester lasad wrote: > > I am running redhat 7.3 everything is working properly until loading the iptables >rules. After loading the rules I am taking a b

Re: iptables and performance issues

2002-12-20 Thread Bret Hughes
On Fri, 2002-12-20 at 07:59, lester lasad wrote: > > I am running redhat 7.3 everything is working properly until loading the iptables >rules. After loading the rules I am taking a big performance hit. It can take >anywhere from 10 - 30 seconds for my server to display the results of "iptable

iptables and performance issues

2002-12-20 Thread lester lasad
I am running redhat 7.3  everything is working properly until loading the iptables rules.  After loading the rules I am taking a big performance hit.  It can take anywhere from 10 - 30 seconds for my server to display the results of "iptables -L".  This wasn't happening prior to the rules being loa