From owner-freebsd-questions@FreeBSD.ORG  Wed Mar 10 07:24:31 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C65A016A4CE
	for <freebsd-questions@freebsd.org>;
	Wed, 10 Mar 2004 07:24:31 -0800 (PST)
Received: from out2.smtp.messagingengine.com (out2.smtp.messagingengine.com
	[66.111.4.26])	by mx1.FreeBSD.org (Postfix) with ESMTP id 65A0B43D1D
	for <freebsd-questions@freebsd.org>;
	Wed, 10 Mar 2004 07:24:30 -0800 (PST)
	(envelope-from nkinkade@fastmail.fm)
X-Sasl-enc: w3Sf0nY520Mky/UtZdKBgA 1078932268
Received: from [206.26.199.146] (unknown [206.27.244.214])
	by www.fastmail.fm (Postfix) with ESMTP id 8F5D86F7972;
	Wed, 10 Mar 2004 10:24:27 -0500 (EST)
Received: from nkinkade by [206.26.199.146] with local (Exim 4.12)
	id 1B15Z1-0000Fw-00; Wed, 10 Mar 2004 09:24:07 -0600
Date: Wed, 10 Mar 2004 09:24:07 -0600
From: Nathan Kinkade <nkinkade@ub.edu.bz>
To: Darryl Hoar <darryl@osborne-ind.com>
Message-ID: <20040310152407.GD760@nkinkade.bmp.ub>
Mail-Followup-To: Darryl Hoar <darryl@osborne-ind.com>,
	'Mike Jackson' <mj@sci.fi>, freebsd-questions@freebsd.org
References: <20040309175520.GK8152@gentoo.netauth.com>
	<009401c406a9$635e2350$0701a8c0@darryl>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="O3RTKUHj+75w1tg5"
Content-Disposition: inline
In-Reply-To: <009401c406a9$635e2350$0701a8c0@darryl>
User-Agent: Mutt/1.4.1i
Sender: Nathan Kinkade <nkinkade@[206.26.199.146]>
cc: 'Mike Jackson' <mj@sci.fi>
cc: freebsd-questions@freebsd.org
Subject: Re: Firewall & DSL performance
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Nathan Kinkade <nkinkade@ub.edu.bz>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Mar 2004 15:24:31 -0000


--O3RTKUHj+75w1tg5
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Mar 10, 2004 at 08:10:05AM -0600, Darryl Hoar wrote:
> Well,
> last night I changed the ipf.rules file to be:
>=20
> pass in all  keep state
> pass out all keep state
>=20
> to completely open my firewall to test my performance.
>=20
> Well, it didn't make a lick of difference.  Still got
> 700K.
>=20
> If I open the firewall like I did, shouldn't performance
> be a non issue ?
>=20
> thanks,
> Darryl=20

I wouldn't rule out the inside network card.  I recently noticed
something similar here and it turned out that, though a particular
network card worked on the whole, it's performace was inexplicable
miserable.  We swapped out the cheap SiS card with a good 3Com card and
the problem was solved.  Is there any way that you could get ahold of
another NIC to test?

Nathan
--=20
gpg --keyserver pgp.mit.edu --recv-keys D8527E49

--O3RTKUHj+75w1tg5
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQFATzMXO0ZIEthSfkkRAl38AJ48traOfxmms1/r2wzCJwOJHF9p9QCfaYH9
RcOsS/osnshQFCwJ6pXde8o=
=t+yO
-----END PGP SIGNATURE-----

--O3RTKUHj+75w1tg5--