PDA

Bekijk de volledige versie : slow response after iptables -L -v


kraai
09-06-2005, 21:50
Hi,

when I use iptables -L -v I get
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
5 315 logdrop all -- any any anywhere anywhere state INVALID
6191 1590K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
65 3900 ACCEPT all -- lo any anywhere anywhere state NEW
598 177K ACCEPT all -- br0 any anywhere anywhere state NEW
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:www
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:7776
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:webcam
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ftp
11 1212 logdrop all -- any any anywhere anywhere

Chain FORWARD (policy ACCEPT 3982 packets, 243K bytes)
pkts bytes target prot opt in out source destination
15431 6270K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 logdrop all -- any any anywhere anywhere state INVALID
1 63 ACCEPT all -- br0 br0 anywhere anywhere
51 2500 ACCEPT tcp -- eth1 any anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 1/sec burst 5
0 0 ACCEPT tcp -- eth1 any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5
0 0 ACCEPT icmp -- eth1 any anywhere anywhere limit: avg 1/sec burst 5 icmp echo-request

And the lines after this come up very slowly

4 192 ACCEPT tcp -- any any anywhere 192.168.1.2 tcp dpt:4662
24 2160 ACCEPT udp -- any any anywhere 192.168.1.2 udp dpt:4672
0 0 ACCEPT tcp -- any any anywhere my.router tcp dpt:webcam
0 0 ACCEPT tcp -- any any anywhere my.router tcp dpt:7776
0 0 ACCEPT tcp -- any any anywhere 192.168.1.2 tcp dpt:1723
0 0 ACCEPT tcp -- any any anywhere 192.168.1.2 tcp dpt:ssh

Why is this ?
pipos
10-06-2005, 09:08
Hi,

when I use iptables -L -v I get
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
5 315 logdrop all -- any any anywhere anywhere state INVALID
6191 1590K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
65 3900 ACCEPT all -- lo any anywhere anywhere state NEW
598 177K ACCEPT all -- br0 any anywhere anywhere state NEW
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:www
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:7776
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:webcam
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:ftp
11 1212 logdrop all -- any any anywhere anywhere

Chain FORWARD (policy ACCEPT 3982 packets, 243K bytes)
pkts bytes target prot opt in out source destination
15431 6270K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 logdrop all -- any any anywhere anywhere state INVALID
1 63 ACCEPT all -- br0 br0 anywhere anywhere
51 2500 ACCEPT tcp -- eth1 any anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 1/sec burst 5
0 0 ACCEPT tcp -- eth1 any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5
0 0 ACCEPT icmp -- eth1 any anywhere anywhere limit: avg 1/sec burst 5 icmp echo-request

And the lines after this come up very slowly

4 192 ACCEPT tcp -- any any anywhere 192.168.1.2 tcp dpt:4662
24 2160 ACCEPT udp -- any any anywhere 192.168.1.2 udp dpt:4672
0 0 ACCEPT tcp -- any any anywhere my.router tcp dpt:webcam
0 0 ACCEPT tcp -- any any anywhere my.router tcp dpt:7776
0 0 ACCEPT tcp -- any any anywhere 192.168.1.2 tcp dpt:1723
0 0 ACCEPT tcp -- any any anywhere 192.168.1.2 tcp dpt:ssh

Why is this ?

It's because the DNS resolution.
Try iptables -n -v -L
this will disable DNS resolution.
Oleg
10-06-2005, 10:28
Why is this ?
Due to DNS resolution. Add -n switch.