Hi! no, thats not the problem, icmp echo replys are allowed and I can ping myself from another host in the internet. bye CB ----- Original Message ----- From: "Alexander Bien" <abien@gmx.net> To: "Christian Bohn" <cbohn@uni-mannheim.de> Sent: Wednesday, January 31, 2001 3:10 PM Subject: RE: [suse-security] SuSEFirewall slows down connection

Are u sure u allow icmp echo replys? So the other host can ping you ? Check that please.. then try again .. and maybe it will work faster this time.

Many hosts (specilly smtp servers) first ping the other host to see if its still alive..

--

Mit freundlichen Grüßen

Alexander Bien

-- PIRONET NDH Alexander Bien - Technical Assistant - SBU Services Josef-Lammerting-Allee 14-18, 50933 Cologne - Germany Tel.: +49 (0)172 7760569 - Fax: +49 (0)221 770 2815 mailto:abien@pironet.com - http://www.pironet.com

...

-----Original Message----- From: Christian Bohn [mailto:cbohn@uni-mannheim.de] Sent: Wednesday, January 31, 2001 3:04 PM To: suse-security@suse.de Subject: [suse-security] SuSEFirewall slows down connection

Hi!

I encountered the following problem with the SuSEfirewall-skript:

First of all, my configuration: I've got a Linux Box (SuSE 6.4) running as a DSL-Router (incl. Masquerading) for an internal Network. The firewall-skript (which Version doesn't really matter, I've tried out several versions, including the newest form Marc's Website) is installed on that Linux-Box.

The Problem: HTTP & SSH are working well but when I try to connect to a

Internet-Server

...

via FTP, POP(sometimes) or SMTP it takes a long time (ca. 20sec) until data is transferred although the connection itself is established immediately. I do not think that it is a DNS problem, reverse&forward lookups are working well. Although I think that it has nothing to do with masquerading because if I work on the server console, the problem also occurs. If I shut down the firewall, everything is working fine!

I hope somebody can help me an that this is not a FAQ ;-)

bye

Christian Bohn

--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com