On Tue, Jun 03, 2003 at 09:39:50PM +0200, SLeiBt wrote:
> Hi,
> 
> Le mar 03/06/2003 ? 14:15, [EMAIL PROTECTED] a ?crit :
> > Hi.
> > 
> > I have setup a firewall (I am just doing masquerading now) between the a 
> > cable modem and the local network. Cable modem is connected to eth1 and the 
> > eth0 connects to the local switch. When both interfaces are up, The 
> > connecting beween the firewall and a local system is too slow. As soon as I 
> > bring eth1 down
> > 
> > # ifdown eth1
> > 
> > the connection speed improves dramatically in the local network.
> > 
> > The two network cards are RTL 8139. The kernel version is 2.4.19-586tsc. I 
> > am using Debian GNU/Linux testing.
> > 
> > I tried changing both network cards but no change in speed. I also removed 
> > the masquerading rule still the same problem.
> 
> Could that be dns related? Maybe putting private addresses in your
> /etc/hosts will help things...
> 

Yes it is. I ran tcpdump on eth1 and found out that the firewall was
trying to do a reverse look of the local IPs. I was given three
nameservers by the DHCP server at ISP but the firewall couldn't
access any one of those thus resulting in the delay.

I removed all nameserver entries in /etc/resolv.conf and put the
following line in /etc/dhclient.conf

supersede domain-name-servers 127.0.0.1;

and renewed the IP of eth1. Everything is fine now.

Thank you all for the replies.
Avinash.

-- 
------------------------------------
 Avinash S
 http://www.geocities.com/ssavinash
------------------------------------


Reply via email to