[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    AFS problem with 4.1.13?
From:       "Vincent Fox" <vbfox () ucdavis ! edu>
Date:       2006-10-08 19:24:55
Message-ID: 200610081924.k98JOt7r000745 () andrena ! ucdavis ! edu
[Download RAW message or body]


Has anyone experienced problems with AFS servers (particularly writes) when
using IP Filter?

Problem: write access to AFS volumes abominably slow, 15 minutes for a
simple  16-meg file.

This problem seems to be present when using "keep state". If I trim the
"keep state" entries from my ruleset and make it a completely stateless
firewall otherwise all the same, it works fine and writes are very quick.

I put log statements on all block in lines to make sure I wasn't
inadvertantly blocking some important IP, and nothing appeared.  I tested
that my log statements were working by doing pings and nmaps from
non-listed hosts and seeing entries appear.

OS: Solaris 8
Compiler: SunStudio 11
Pfil 2.1.11 file PFILEDEBUG line removed from Makefile
IPFilter 4.1.13


[prev in list] [next in list] [prev in thread] [next in thread]