/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */


Hi Gang,

I just implemented somewhat of a porn filter for a customer, by adding almost 50,000 
IP address to an IPCHAINS block filter.  Now the obvious problem is that the machine 
takes almost 50ms to process every packet, as it has to sift through all the junk I 
just fed it.

Question: if I add more restrictions, such as a source as well as a destination IP 
address, will it make it worse for those who don't match the source IP?  I only really 
need to block access for some machines, and I need fast access (blocked or not, 
doesn't matter) with another machine.

Also, where is this list stored, once added into the IPCHAINS?  Is it in RAM?  I have 
64MB ram - will adding ram help any?

Bob

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to