Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 25 Apr 2001 14:16:38 -0400
From:      Mikel <mikel@ocsinternet.com>
To:        "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG>
Subject:   ipfw, natd & telnet...
Message-ID:  <3AE71486.DF3A2E42@ocsinternet.com>

next in thread | raw e-mail | index | archive | help
sorry for the resend...this is plain text...

Hi all...I have a client that insists on using telnet to connect to
their servers behind a fBSD firewall, running ipfw & natd of
course...It works but I am experiencing a latency that well truthfully
bothers me a bit. Even if I run in OPEN it still takes
inordinate amount of time to connect. So obviously the client is less
than pleased but are willing to live with the latency for now,
but I can tell that they aren't exactly happy.

Ok so does anyone have any idea on how , or where, to look for possible
drag points?

I know the following diagram is a bit lack luster but it should suffice.

( inet )
  |
[ fw x.x.x.n, x.x.x.a, x.x.x.b, x.x.x.c ]
  |
  +==+==+
  |  |  |
  |  |  [ Web y.y.y.a ]
  |  |
  |  |
  |  [ db y.y.y.b ]
  |
  |
  [ apps y.y.y.c ]

rc.natd:
    interface fxp0
    use_sockets
    same_ports
    redirect_address y.y.y.a x.x.x.a
    redirect_address y.y.y.b x.x.x.b
    redirect_address y.y.y.c x.x.x.c

also tried this instead, with no perceptible difference:

    redirect_port tcp y.y.y.a:23 23
    redirect_port udp y.y.y.a:23 23


Remember the firewall is running OPEN right now and it does work; it's
just very painfully slow.

Thanks in advance....

Cheers,
Mikel


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AE71486.DF3A2E42>