Re: [suse-security] SuSEFirewall slows down connection
Hi!
thank you, that's it!
Perhaps this one should be added to the FAQ!
bye
Christian "now surfing fast" Bohn
----- Original Message -----
From: "Christoph Wegener"
Hallo Christian, ich würde sagen - Du hast den ident (Port113) gesperrt, dann warten Verbindungen wie SMTP, Telnet, SSH unter Umständen auf einen TimeOut und der liegt im bereich von einigen (10) Sekunden...
Christoph
Christian Bohn wrote:
Hi!
I encountered the following problem with the SuSEfirewall-skript:
First of all, my configuration: I've got a Linux Box (SuSE 6.4) running as a DSL-Router (incl. Masquerading) for an internal Network. The firewall-skript (which Version doesn't really matter, I've tried out several versions, including the newest form Marc's Website) is installed on that Linux-Box.
The Problem: HTTP & SSH are working well but when I try to connect to a Internet-Server via FTP, POP(sometimes) or SMTP it takes a long time (ca. 20sec) until data is transferred although the connection itself is established immediately. I do not think that it is a DNS problem, reverse&forward lookups are working well. Although I think that it has nothing to do with masquerading because if I work on the server console, the problem also occurs. If I shut down the firewall, everything is working fine!
I hope somebody can help me an that this is not a FAQ ;-)
bye
Christian Bohn
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
-- Ruhr-Universitaet Bochum Lehrstuhl für Biophysik c/o Christoph Wegener Gebaeude ND 04/Nord D-44780 Bochum, GERMANY
Tel: +49(234)32-25754, Fax: +49(234)32-14626
mailto://cwe@bph.ruhr-uni-bochum.de http://www.bph.ruhr-uni-bochum.de
__ _ / / (_)__ __ ____ __ / /__/ / _ \/ // /\ \/ / . . . t h e c h o i c e o f a /____/_/_//_/\_,_/ /_/\_\ G N U g e n e r a t i o n . . .
Hi, I have to apologize: First I did not include the list address in my response an second it ws not in English - so I will translate for everybody:
Hallo Christian, Hi Christian,
ich würde sagen - Du hast den ident (Port113) gesperrt, dann warten Verbindungen wie SMTP, Telnet, SSH unter Umständen auf einen TimeOut und der liegt im Bereich von einigen (10) Sekunden...
I think ident (port 113) is blocked by your firewall configuration and therefore connections like SMTP and some others are waiting for a timeout - this might last for some (10) seconds... Christoph Sorry Again!! - BTW: I know that my .signature is longer than 4 lines... :)) -- Ruhr-Universitaet Bochum Lehrstuhl für Biophysik c/o Christoph Wegener Gebaeude ND 04/Nord D-44780 Bochum, GERMANY Tel: +49(234)32-25754, Fax: +49(234)32-14626 mailto://cwe@bph.ruhr-uni-bochum.de http://www.bph.ruhr-uni-bochum.de __ _ / / (_)__ __ ____ __ / /__/ / _ \/ // /\ \/ / . . . t h e c h o i c e o f a /____/_/_//_/\_,_/ /_/\_\ G N U g e n e r a t i o n . . .
participants (2)
-
Christian Bohn -
Christoph Wegener