From owner-freebsd-questions Mon Nov 19 1:59: 4 2001 Delivered-To: freebsd-questions@freebsd.org Received: from elvis.mu.org (elvis.mu.org [216.33.66.196]) by hub.freebsd.org (Postfix) with ESMTP id C0E4F37B416 for ; Mon, 19 Nov 2001 01:59:01 -0800 (PST) Received: by elvis.mu.org (Postfix, from userid 1192) id CE5D481D0A; Mon, 19 Nov 2001 03:59:01 -0600 (CST) Date: Mon, 19 Nov 2001 03:59:01 -0600 From: Alfred Perlstein To: Brendan Kosowski Cc: questions@freebsd.org Subject: Re: Services very slow on Firewall/nat boxes. Message-ID: <20011119035901.O13393@elvis.mu.org> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from brendan@bmk.com.au on Mon, Nov 19, 2001 at 08:45:11PM +1100 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG * Brendan Kosowski [011119 03:45] wrote: > > I am running natd on a FreeBSD box with IPFIREWALL and IPDIVERT added to > the kernel. Firewall type is open. > > I have noticed that when you run a server (eg. sendmail, named, pop3 etc.) > on the above, initial connection to the service is very slow (ie. between > 5 and 60 seconds ), however once connection has been established data > transfer becomes very fast (as per normal). > > If I disable natd and replace kernel with original, initial connection to > services is very fast. > > This box is on a network with very little traffic. > > I would greatly appreciate any help on speeding up initial connection to > services. Your DNS isn't working for some reason while you're running NATd. Please try the freebsd-questions forum for questions like this. -- -Alfred Perlstein [alfred@freebsd.org] 'Instead of asking why a piece of software is using "1970s technology," start asking why software is ignoring 30 years of accumulated wisdom.' http://www.morons.org/rants/gpl-harmful.php3 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message