[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-sun
Subject:    Re: firewall on solaris 2.6
From:       Steve Siirila <sfs () TC ! UMN ! EDU>
Date:       2000-03-14 17:17:14
[Download RAW message or body]

Kurt Keller wrote:
> We had the same problem on two machines recently. DNS configuration, however,
> was fine and resolving via DNS (nslookup) quick and no problem. The culprit was
> nscd(1M), the name service cache daemon. You might want to try to stop it or
> disable hosts caching in /etc/nscd.conf.

Be wary of actually stopping nscd, which is what we had originally done when
we encountered similar problems.  We later found out that the door file which
it creates must exist, and the only way to ensure that is to start up nscd
after a reboot.  We have since taken the approach of disabling hosts caching
via /etc/nscd.conf instead with success.

> Cheers,
>
> Kurt
>
>
>
>
>
> Andy De Petter <adepette@KRAMERIA.NET> am 13.03.2000 23:16:58
> Ali Tabasi wrote:
> >
> > I am running an application proxy firewall on top of solaris 2.6 on SUN.
> > I experience intermittent problems with the "hanging" of commands. For
> instance, the command "netstat" hangs for 30 to 60 seconds after displaying a
> few lines before completion. Another example, clicking on an URL from a client
> PC(which it has to go to the firewall first) "hangs" for a long time before the
> page loads. Like I said, these problems are intermittent and all the latest
> patches have been applied.
>
> Do you have the same problem when you try netstat -n ?  The -n stands
> for "don't try to resolve IP addresses".  From the point I see it, you
> are having difficulties with your DNS server, and that might be the
> reason that it "hangs" for a long time before the page loads.
>


--

Steven F. Siirila
Enterprise Internet Services			Office: Lind Hall, Room 130B
Academic and Distributed Computing Services	E-mail: sfs@umn.edu
Office of Information Technology		Voice: (612) 626-0244
University of Minnesota				Fax: (612) 626-7593

[prev in list] [next in list] [prev in thread] [next in thread]