/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */

I've upgraded my system to RedHat 7.2, kernel 2.4.7. I use iptables 
v.1.2.3-1. Before I was running 2.0.36 with ipfwadm. 
After upgrade I noticed that all my connections from masqueraded boxes 
became very-very-very slow. After hours of testing and checking I noticed 
that it happens only to incoming transfers (www, ftp, etc). All outgoing 
transfers (like outgoing ftp to the world) work fine. I have no idea what 
can it it be. I dont't have any shapers or filters. 

Here are my iptables rules (taken from default rc.firewall):

iptables -P INPUT ACCEPT
iptables -F INPUT
iptables -P OUTPUT ACCEPT
iptables -F OUTPUT
iptables -P FORWARD DROP
iptables -F FORWARD
iptables -t nat -F

iptables -A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -o ppp0 -j ACCEPT
iptables -A FORWARD -j LOG

iptables -t nat -A POSTROUTING -o ppp0 -s 192.168.1.0/24  -j MASQUERADE

and routing table:

ppp0.IP      *            255.255.255.255 UH    0      0        0 ppp0
192.168.1.0  *            255.255.255.0   U     0      0        0 eth0
127.0.0.0    *            255.0.0.0       U     0      0        0 lo
default      ppp0.IP      0.0.0.0         UG    0      0        0 ppp0

Any suggestions or ideas would be greatly appreciated....

-- 
Slawek Lawicki
[EMAIL PROTECTED]

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to