[lkml]   [2000]   [Nov]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: need urgent help with 2.2.17 + ipchains
Good afternoon, Michael,
(The linux-kernel mailing list is not really the best place for
userspace issues. You should probably use the ipmasq list for future
questions. See for the
ipchains homepage and for info on that list.)

On Tue, 7 Nov 2000, Michael Kummer wrote:

> i have the following very nasty problem.
> everytime i execute ipchains -F [rule] my box freezes for 25 minutes!
> i run slackware on 2.2.17.
> a friend of mine told me that he had a simliar problem and fixed it with
> downgrading shlibs.

One other possibility is to make sure that all of your dns rules
are at the top of your firewall, and that those dns rules only use ip
addresses and networks ("-d" as opposed to "-d").
To check which rule(s) is/are giving you heartache, go to the top
of your firewall script and add "set -x" as the second line, just under
"#!/bin/bash". Bash will show each line before it is executed. The lines
that sit there for two minutes are probably the ones that are having
trouble with dns lookups.

> -- CUT --
> Linux version 2.2.17 (root@gatekeeper) (gcc version egcs-2.91.66
> 19990314/Linux (egcs-1.1.2 release)) #2 Sun Sep 17 00:56:47 /e$Detected
> 166591 kHz processor.
> Console: colour VGA+ 80x25
> Calibrating delay loop... 332.60 BogoMIPS
> Memory: 128092k/131072k available (1012k kernel code, 408k reserved, 1516k
> data, 44k init)

Oh, that's way too much memory for a firewall. Mail me half of
it. ;-)
- Bill

"Bastard Operators from Hell" anagrams to "Shatterproof Armored Balls"
(Courtesy of Jens Benecke <>)
William Stearns ( Mason, Buildkernel, named2hosts,
and ipfwadm2ipchains are at:
LinuxMonth; articles for Linux Enthusiasts!

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 12:45    [W:0.076 / U:1.980 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site