Re: IpTables Displays Ultra Slow
Hello, Hamlin DSouza a écrit : The -n option doesn't resolve the the ip address's hence faster. For the slow login, ie takes a while to get the password prompt: add UseDNS no in /etc/ssh/sshd_config and reload ssh service ssh reload The common cause seems to be related to DNS lookup failure with timeout. Maybe the resolver (resolv.conf and related files) is not properly setup, or iptables is blocking DNS requests and/or replies. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/50a91ed3.3020...@plouf.fr.eu.org
Re: IpTables Displays Ultra Slow
what about iptables -L -n ? On 11/16/2012 10:58 AM, Tóth Tibor Péter wrote: I have some firewall rules set up. When I do iptables -L it starts to display the rules but after the first 3 lines stops and before every rule it waits a little bit. about 10-15 secs. When I have Iptables on the server, the ssh login is also slow. Login prompt is fast, but have to wait a while to get to the password prompt. What could cause this ? Ezen üzenet és annak bármely csatolt anyaga bizalmas, jogi védelem alatt áll, a nyilvános közléstől védett. Az üzenetet kizárólag a címzett, illetve az általa meghatalmazottak használhatják fel. Ha Ön nem az üzenet címzettje, úgy kérjük, hogy telefonon, vagy e-mail-ben értesítse erről az üzenet küldőjét és törölje az üzenetet, valamint annak összes csatolt mellékletét a rendszeréből. Ha Ön nem az üzenet címzettje, abban az esetben tilos az üzenetet vagy annak bármely csatolt mellékletét lemásolnia, elmentenie, az üzenet tartalmát bárkivel közölnie vagy azzal visszaélnie. This message and any attachment are confidential and are legally privileged. It is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. If you are not the intended recipient, please phone or email the sender and delete this message and any attachment of it from your system. Please note that any dissemination, distribution, copying or use of or reliance upon the information contained in and transmitted by this e-mail or to anyone other than the recipient designated above by the sender is unauthorised and strictly prohibited. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/k8548t$3hh$1...@ger.gmane.org
RE: IpTables Displays Ultra Slow
iptables -L -n Is fast as supposed to be. What causing -L being slow? and what is the reason for the login prompt being slow as well ? Thanks! -Original Message- From: ha [mailto:hiei.arh...@gmail.com] Sent: Friday, November 16, 2012 11:24 AM To: debian-user@lists.debian.org Subject: Re: IpTables Displays Ultra Slow what about iptables -L -n ? On 11/16/2012 10:58 AM, Tóth Tibor Péter wrote: I have some firewall rules set up. When I do iptables -L it starts to display the rules but after the first 3 lines stops and before every rule it waits a little bit. about 10-15 secs. When I have Iptables on the server, the ssh login is also slow. Login prompt is fast, but have to wait a while to get to the password prompt. What could cause this ? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/k8548t$3hh$1...@ger.gmane.org Ezen üzenet és annak bármely csatolt anyaga bizalmas, jogi védelem alatt áll, a nyilvános közléstől védett. Az üzenetet kizárólag a címzett, illetve az általa meghatalmazottak használhatják fel. Ha Ön nem az üzenet címzettje, úgy kérjük, hogy telefonon, vagy e-mail-ben értesítse erről az üzenet küldőjét és törölje az üzenetet, valamint annak összes csatolt mellékletét a rendszeréből. Ha Ön nem az üzenet címzettje, abban az esetben tilos az üzenetet vagy annak bármely csatolt mellékletét lemásolnia, elmentenie, az üzenet tartalmát bárkivel közölnie vagy azzal visszaélnie. This message and any attachment are confidential and are legally privileged. It is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. If you are not the intended recipient, please phone or email the sender and delete this message and any attachment of it from your system. Please note that any dissemination, distribution, copying or use of or reliance upon the information contained in and transmitted by this e-mail or to anyone other than the recipient designated above by the sender is unauthorised and strictly prohibited. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/7af9f7955a605547ab5bcd2b303f4b7d010c8de8b...@budakzpmbx02.mak.allamkincstar.gov.hu
RE: IpTables Displays Ultra Slow
DNS look ups are what is slowing it down -n is no dns look ups On Nov 16, 2012 7:51 AM, Tóth Tibor Péter toth.tibor.pe...@kincsinfo.hu wrote: iptables -L -n Is fast as supposed to be. What causing -L being slow? and what is the reason for the login prompt being slow as well ? Thanks! -Original Message- From: ha [mailto:hiei.arh...@gmail.com] Sent: Friday, November 16, 2012 11:24 AM To: debian-user@lists.debian.org Subject: Re: IpTables Displays Ultra Slow what about iptables -L -n ? On 11/16/2012 10:58 AM, Tóth Tibor Péter wrote: I have some firewall rules set up. When I do iptables -L it starts to display the rules but after the first 3 lines stops and before every rule it waits a little bit. about 10-15 secs. When I have Iptables on the server, the ssh login is also slow. Login prompt is fast, but have to wait a while to get to the password prompt. What could cause this ? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/k8548t$3hh$1...@ger.gmane.org Ezen üzenet és annak bármely csatolt anyaga bizalmas, jogi védelem alatt áll, a nyilvános közléstől védett. Az üzenetet kizárólag a címzett, illetve az általa meghatalmazottak használhatják fel. Ha Ön nem az üzenet címzettje, úgy kérjük, hogy telefonon, vagy e-mail-ben értesítse erről az üzenet küldőjét és törölje az üzenetet, valamint annak összes csatolt mellékletét a rendszeréből. Ha Ön nem az üzenet címzettje, abban az esetben tilos az üzenetet vagy annak bármely csatolt mellékletét lemásolnia, elmentenie, az üzenet tartalmát bárkivel közölnie vagy azzal visszaélnie. This message and any attachment are confidential and are legally privileged. It is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. If you are not the intended recipient, please phone or email the sender and delete this message and any attachment of it from your system. Please note that any dissemination, distribution, copying or use of or reliance upon the information contained in and transmitted by this e-mail or to anyone other than the recipient designated above by the sender is unauthorised and strictly prohibited. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/7af9f7955a605547ab5bcd2b303f4b7d010c8de8b...@budakzpmbx02.mak.allamkincstar.gov.hu
Re: IpTables Displays Ultra Slow
On Friday 16 November 2012 06:05 PM, Tóth Tibor Péter wrote: iptables -L -n Is fast as supposed to be. What causing -L being slow? and what is the reason for the login prompt being slow as well ? Thanks! -Original Message- From: ha [mailto:hiei.arh...@gmail.com] Sent: Friday, November 16, 2012 11:24 AM To: debian-user@lists.debian.org Subject: Re: IpTables Displays Ultra Slow what about iptables -L -n ? On 11/16/2012 10:58 AM, Tóth Tibor Péter wrote: I have some firewall rules set up. When I do iptables -L it starts to display the rules but after the first 3 lines stops and before every rule it waits a little bit. about 10-15 secs. When I have Iptables on the server, the ssh login is also slow. Login prompt is fast, but have to wait a while to get to the password prompt. What could cause this ? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/k8548t$3hh$1...@ger.gmane.org Ezen üzenet és annak bármely csatolt anyaga bizalmas, jogi védelem alatt áll, a nyilvános közléstől védett. Az üzenetet kizárólag a címzett, illetve az általa meghatalmazottak használhatják fel. Ha Ön nem az üzenet címzettje, úgy kérjük, hogy telefonon, vagy e-mail-ben értesítse erről az üzenet küldőjét és törölje az üzenetet, valamint annak összes csatolt mellékletét a rendszeréből. Ha Ön nem az üzenet címzettje, abban az esetben tilos az üzenetet vagy annak bármely csatolt mellékletét lemásolnia, elmentenie, az üzenet tartalmát bárkivel közölnie vagy azzal visszaélnie. This message and any attachment are confidential and are legally privileged. It is intended solely for the use of the individual or entity to whom it is addressed and others authorised to receive it. If you are not the intended recipient, please phone or email the sender and delete this message and any attachment of it from your system. Please note that any dissemination, distribution, copying or use of or reliance upon the information contained in and transmitted by this e-mail or to anyone other than the recipient designated above by the sender is unauthorised and strictly prohibited. Hi, The -n option doesn't resolve the the ip address's hence faster. For the slow login, ie takes a while to get the password prompt: add UseDNS no in /etc/ssh/sshd_config and reload ssh service ssh reload Best Regards. Hamlin -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/50a661b5.6030...@gmail.com
