Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 23 Mar 2002 08:40:37 -0800
From:      "Tony Saign" <tony@saign.com>
To:        <freebsd-ipfw@freebsd.org>
Subject:   Problems after cvsup to 4.5 -stable 3/21 with ipfw
Message-ID:  <000001c1d289$7641c9a0$1401a8c0@frankenmobl>

Next in thread | Raw E-Mail | Index | Archive | Help
 After a recent cvsup to 4.5 -stable, I noticed my server to be EXTREMLY
sluggish with ipfw enabled.
Web pages hanging indefinately, mail download HORRIBLY slow!

Turning ipfw off by add 0110 allow tcp from any to any via fxp0, things
return to normal.

I made no changes to my ruleset listed below. Can anyone offer any
insight/help? (PLEASE!)

Thanks,
-Tony

00100   50    2516 allow ip from any to any via lo0
00110 3235 1131435 allow tcp from any to any via fxp0
00200    0       0 deny ip from any to 127.0.0.0/8
00300    0       0 deny ip from 127.0.0.0/8 to any
00400    0       0 deny ip from 168.120.0.0/16 to any
00500    0       0 deny tcp from 168.120.0.0/16 to any
00600    0       0 deny udp from 168.120.0.0/16 to any
00700    0       0 allow tcp from any to 216.40.33.39 55000
00800 6413 4145842 allow tcp from any to any out established
00900  120    5801 allow tcp from any to any keep-state out setup
01000 4591  321384 allow tcp from any to any established
01100    0       0 allow tcp from 216.120.17.24 to any 21 setup
01200    0       0 allow tcp from 216.188.41.2 to any 21 setup
01300    7     336 allow tcp from any to any 22 setup
01400    4     240 allow tcp from any to any 25 setup
01500    4     192 allow tcp from any to any 110 setup
01600   21    1008 allow tcp from any to any 80 setup
01700    0       0 allow tcp from any to any 443 setup
01900    0       0 allow udp from any 53 to any 53 in recv fxp0
02000    0       0 allow udp from any 53 to any 53 out xmit fxp0
02100  163   10540 allow udp from any 1024-65534 to any 53
02200  163   35814 allow udp from any 53 to any 1024-65534
02300    0       0 allow tcp from any 1024-65534 to any 53
02400    0       0 allow tcp from any 53 to any 1024-65534
02500    0       0 allow icmp from any to any icmptype 3
02600    0       0 allow icmp from any to any icmptype 4
02700   12    1008 allow icmp from any to any out icmptype 8
02800   12    1008 allow icmp from any to any in icmptype 0
02900    0       0 allow icmp from any to any in icmptype 11
03000   61    4416 deny log logamount 1000 ip from any to any
65535    0       0 deny ip from any to any


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?000001c1d289$7641c9a0$1401a8c0>