Date: Tue, 17 Apr 2001 17:13:56 -0700 From: John Calderon <john@timogen.com> To: questions@FreeBSD.org Subject: question regarding ipfilter and slow response times Message-ID: <3ADCDC44.BAA5B3F0@timogen.com>
next in thread | raw e-mail | index | archive | help
I have a gw/fw/nat machine that is logging icmp/tcp requests but is serious lagging the return reply. a simple ping takes 800007.4ms but on the gw itself it shows it recieves it real-time. I am not blocking anything and letting everything thru ( just to find out the lowest common denominator) and it recieves a ack packet but doesn't forward that to the host behind my gw/fw any body run into the same problem 17/04/2001 15:44:43.947702 dc0 @0:4 p 192.168.200.2,1117 -> 206.13.28.12,53 PR udp len 20 18432 IN 17/04/2001 15:44:43.947744 fxp0 @0:6 p 192.168.200.2,1117 -> 206.13.28.12,53 PR udp len 20 18432 K-S OUT 17/04/2001 15:44:44.947386 dc0 @0:4 p 192.168.200.2 -> 192.168.200.1 PR icmp len 20 21504 icmp 8/0 IN 17/04/2001 15:44:44.947425 dc0 @0:5 p 192.168.100.7 -> 192.168.200.2 PR icmp len 20 21504 icmp 0/0 K-S OUT 17/04/2001 15:44:45.947408 dc0 @0:4 p 192.168.200.2 -> 192.168.200.1 PR icmp len 20 21504 icmp 8/0 IN 17/04/2001 15:44:45.947449 dc0 @0:5 p 192.168.100.7 -> 192.168.200.2 PR icmp len 20 21504 icmp 0/0 K-S OUT 17/04/2001 15:44:46.947398 dc0 @0:4 p 192.168.200.2 -> 192.168.200.1 PR icmp len 20 21504 icmp 8/0 IN 17/04/2001 15:44:46.947444 dc0 @0:5 p 192.168.100.7 -> 192.168.200.2 PR icmp len 20 21504 icmp 0/0 K-S OUT 17/04/2001 15:44:47.947425 dc0 @0:4 p 192.168.200.2 -> 192.168.200.1 PR icmp len 20 21504 icmp 8/0 IN 17/04/2001 15:44:47.947467 dc0 @0:5 p 192.168.100.7 -> 192.168.200.2 PR icmp len 20 21504 icmp 0/0 K-S OUT snippet from my logs. if you would like more info go ahead let me know network looks like this Internet ---- PUBLICIP 192.168.100.254--------192.168.100.7 192.168.200.1 ------- 192.168.200.2 the .2 address goes thru the .1 ( then NAT works ) then connects to the .7 any help is appreciated. john To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3ADCDC44.BAA5B3F0>