hello all. I have a strange problem with my firewall...always i have to do a shorewall restart, the internet go slow and i have to disconnect and reconnect the internet connection(in my case poff and pon dsl-provider). Anyone got this problem yet? thanks. PS: sorry about my english :) Fabio R Correa ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
---------- Forwarded message ---------- From: Fabio Correa <carpeslaos@gmail.com> Date: 2008/9/8 Subject: internet problems after shorewal restart To: shorewall-users@lists.sourceforge.net hello all. I have a strange problem with my firewall...always i have to do a shorewall restart, the internet go slow and i have to disconnect and reconnect the internet connection(in my case poff and pon dsl-provider). Anyone got this problem yet? thanks. PS: sorry about my english :) Fabio R Correa ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Fabio Correa wrote:> > > ---------- Forwarded message ---------- > From: *Fabio Correa* <carpeslaos@gmail.com <mailto:carpeslaos@gmail.com>> > Date: 2008/9/8 > Subject: internet problems after shorewal restart > To: shorewall-users@lists.sourceforge.net > <mailto:shorewall-users@lists.sourceforge.net> > > > hello all. I have a strange problem with my firewall...always i have to > > do a shorewall restart, the internet go slow and i have to disconnect and > reconnect the internet connection(in my case poff and pon dsl-provider). Anyone > > got this problem yet? thanks. > > PS: sorry about my english :) >I''m sorry -- I don''t understand what problem you are reporting. I didn''t understand it the first time that you reported it which is why I didn''t answer. If you will capture the output of ''shorewall dump'' when your connection is not working correctly and send it to us as a compressed attachment, we can try to guess what problem you are having. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Hi :) humm when i modify the rule file for exemple, i have to "/etc/init.d/shorewall restart" for my changes get effect. after that my internet gets slow...to get my internet work fine again i just reconnect the interface. this is the problem. i think now i was more clear :) sorry, my english suck. i will send the file when the internet is not working. Thanks! Fabio 2008/9/9 Tom Eastep <teastep@shorewall.net>> Fabio Correa wrote: > >> >> >> ---------- Forwarded message ---------- >> From: *Fabio Correa* <carpeslaos@gmail.com <mailto:carpeslaos@gmail.com>> >> Date: 2008/9/8 >> Subject: internet problems after shorewal restart >> To: shorewall-users@lists.sourceforge.net <mailto: >> shorewall-users@lists.sourceforge.net> >> >> >> hello all. I have a strange problem with my firewall...always i have to >> >> do a shorewall restart, the internet go slow and i have to disconnect and >> reconnect the internet connection(in my case poff and pon dsl-provider). >> Anyone >> >> got this problem yet? thanks. >> >> PS: sorry about my english :) >> >> > I''m sorry -- I don''t understand what problem you are reporting. I didn''t > understand it the first time that you reported it which is why I didn''t > answer. > > If you will capture the output of ''shorewall dump'' when your connection is > not working correctly and send it to us as a compressed attachment, we can > try to guess what problem you are having. > > -Tom > -- > Tom Eastep \ Nothing is foolproof to a sufficiently talented fool > Shoreline, \ http://shorewall.net > Washington USA \ teastep@shorewall.net > PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key > > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer''s > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Hi all
Following the instructions of Tom, i captured the output of
"shorewall dump". Follow as attachment the compressed file. I hope you
can
help because always i have to restart the shorewall my internet goes down.
thanks
Fábio R Correa
2008/9/9 Tom Eastep <teastep@shorewall.net>
> Fabio Correa wrote:
>
>>
>>
>> ---------- Forwarded message ----------
>> From: *Fabio Correa* <carpeslaos@gmail.com
<mailto:carpeslaos@gmail.com>>
>> Date: 2008/9/8
>> Subject: internet problems after shorewal restart
>> To: shorewall-users@lists.sourceforge.net <mailto:
>> shorewall-users@lists.sourceforge.net>
>>
>>
>> hello all. I have a strange problem with my firewall...always i have
to
>>
>> do a shorewall restart, the internet go slow and i have to disconnect
and
>> reconnect the internet connection(in my case poff and pon
dsl-provider).
>> Anyone
>>
>> got this problem yet? thanks.
>>
>> PS: sorry about my english :)
>>
>>
> I''m sorry -- I don''t understand what problem you are
reporting. I didn''t
> understand it the first time that you reported it which is why I
didn''t
> answer.
>
> If you will capture the output of ''shorewall dump'' when
your connection is
> not working correctly and send it to us as a compressed attachment, we can
> try to guess what problem you are having.
>
> -Tom
> --
> Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
> Shoreline, \ http://shorewall.net
> Washington USA \ teastep@shorewall.net
> PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer''s
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer''s
challenge
Build the coolest Linux based applications with Moblin SDK & win great
prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
forgot the attach sorry :(
---------- Forwarded message ----------
From: Fabio Correa <carpeslaos@gmail.com>
Date: 2008/10/1
Subject: Re: [Shorewall-users] Fwd: internet problems after shorewal restart
To: Shorewall Users <shorewall-users@lists.sourceforge.net>
Hi all
Following the instructions of Tom, i captured the output of
"shorewall dump". Follow as attachment the compressed file. I hope you
can
help because always i have to restart the shorewall my internet goes down.
thanks
Fábio R Correa
2008/9/9 Tom Eastep <teastep@shorewall.net>
> Fabio Correa wrote:
>
>
>>
>> ---------- Forwarded message ----------
>> From: *Fabio Correa* <carpeslaos@gmail.com
<mailto:carpeslaos@gmail.com>>
>> Date: 2008/9/8
>> Subject: internet problems after shorewal restart
>> To: shorewall-users@lists.sourceforge.net <mailto:
>> shorewall-users@lists.sourceforge.net>
>>
>>
>> hello all. I have a strange problem with my firewall...always i have
to
>>
>> do a shorewall restart, the internet go slow and i have to disconnect
and
>> reconnect the internet connection(in my case poff and pon
dsl-provider).
>> Anyone
>>
>> got this problem yet? thanks.
>>
>> PS: sorry about my english :)
>>
>>
> I''m sorry -- I don''t understand what problem you are
reporting. I didn''t
> understand it the first time that you reported it which is why I
didn''t
> answer.
>
> If you will capture the output of ''shorewall dump'' when
your connection is
> not working correctly and send it to us as a compressed attachment, we can
> try to guess what problem you are having.
>
> -Tom
> --
> Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
> Shoreline, \ http://shorewall.net
> Washington USA \ teastep@shorewall.net
> PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer''s
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer''s
challenge
Build the coolest Linux based applications with Moblin SDK & win great
prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
Fabio Correa wrote:> > Following the instructions of Tom, i captured the output of > "shorewall dump". Follow as attachment the compressed file. I hope you > can help because always i have to restart the shorewall my internet goes > down. thanksFabio, Was your internet connection slow when you captured this dump? It looks like Shorewall was restarted two hours before the dump was taken. -Tom -- Tom Eastep \ The ultimate result of shielding men from the effects of Shoreline, \ folly is to fill the world with fools. Washington, USA \ -- Herbert Spencer ------------------------------------------------------------------------ http://www.shorewall.net ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Tom,
Yes my internet was slow when i captured this dump...shorewall
restarted because I was without electricity during the night and the server
goes down. This problem with the internet happens when i reboot the server
too or when i restart the shorewall.
Fabio
2008/10/1 Tom Eastep <teastep@shorewall.net>
> Fabio Correa wrote:
>
> >
> > Following the instructions of Tom, i captured the output of
> > "shorewall dump". Follow as attachment the compressed file.
I hope you
> > can help because always i have to restart the shorewall my internet
goes
> > down. thanks
>
> Fabio,
>
> Was your internet connection slow when you captured this dump? It looks
> like Shorewall was restarted two hours before the dump was taken.
>
> -Tom
> --
> Tom Eastep \ The ultimate result of shielding men from the effects of
> Shoreline, \ folly is to fill the world with fools.
> Washington, USA \ -- Herbert Spencer
> ------------------------------------------------------------------------
> http://www.shorewall.net
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer''s
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer''s
challenge
Build the coolest Linux based applications with Moblin SDK & win great
prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
Fabio Correa wrote:> Tom, > > Yes my internet was slow when i captured this dump...shorewall > restarted because I was without electricity during the night and the > server goes down. This problem with the internet happens when i reboot > the server too or when i restart the shorewall. >The only thing that I see is messages like this: Oct 1 08:30:55 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 DST=192.168.1.1 LEN=62 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=50338 DPT=53 LEN=42 They indicate that the firewall is attempting to send DNS requests out of eth2 to 192.168.1.1. eth2 is not defined to Shorewall. How is DNS name resolution configured in your network? -Tom -- Tom Eastep \ The ultimate result of shielding men from the effects of Shoreline, \ folly is to fill the world with fools. Washington, USA \ -- Herbert Spencer ------------------------------------------------------------------------ http://www.shorewall.net ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Tom, In resolv.conf i have this: root@fire:/etc# cat resolv.conf nameserver 200.175.89.139 nameserver 200.175.182.139 search lan Fabio 2008/10/1 Tom Eastep <teastep@shorewall.net>> Fabio Correa wrote: > > Tom, > > > > Yes my internet was slow when i captured this dump...shorewall > > restarted because I was without electricity during the night and the > > server goes down. This problem with the internet happens when i reboot > > the server too or when i restart the shorewall. > > > > The only thing that I see is messages like this: > > Oct 1 08:30:55 OUTPUT:REJECT:IN= OUT=eth2 SRC=192.168.1.3 > DST=192.168.1.1 LEN=62 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP > SPT=50338 DPT=53 LEN=42 > > They indicate that the firewall is attempting to send DNS requests out > of eth2 to 192.168.1.1. eth2 is not defined to Shorewall. > > How is DNS name resolution configured in your network? > > -Tom > -- > Tom Eastep \ The ultimate result of shielding men from the effects of > Shoreline, \ folly is to fill the world with fools. > Washington, USA \ -- Herbert Spencer > ------------------------------------------------------------------------ > http://www.shorewall.net > > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer''s > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Fabio Correa wrote:> Tom, > > > In resolv.conf i have this: > > root@fire:/etc# cat resolv.conf > nameserver 200.175.89.139 <http://200.175.89.139> > nameserver 200.175.182.139 <http://200.175.182.139> > search lanThen how do you explain the fact that your firewall is sending UDP port 53 requests to 192.168.1.1? Do these log messages stop after you restart your PPP link? -Tom -- Tom Eastep \ The ultimate result of shielding men from the effects of Shoreline, \ folly is to fill the world with fools. Washington, USA \ -- Herbert Spencer ------------------------------------------------------------------------ http://www.shorewall.net ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
good question...this net is the net of the adsl modem and eth2. Humm let me make a question in my scenario here i have eth0(loc) 192.168.100.1, eth2 192.168.1.3 and the modem adsl is attached in eth2 and when i connect my ppp link ppp0(net) with this scenario i have to do this? http://www.shorewall.net/PPTP.htm#PPTP_ADSL 2008/10/1 Tom Eastep <teastep@shorewall.net>> Fabio Correa wrote: > > Tom, > > > > > > In resolv.conf i have this: > > > > root@fire:/etc# cat resolv.conf > > nameserver 200.175.89.139 <http://200.175.89.139> > > nameserver 200.175.182.139 <http://200.175.182.139> > > search lan > > Then how do you explain the fact that your firewall is sending UDP port > 53 requests to 192.168.1.1? Do these log messages stop after you restart > your PPP link? > > -Tom > -- > Tom Eastep \ The ultimate result of shielding men from the effects of > Shoreline, \ folly is to fill the world with fools. > Washington, USA \ -- Herbert Spencer > ------------------------------------------------------------------------ > http://www.shorewall.net > > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer''s > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Fabio Correa wrote:> good question...this net is the net of the adsl modem and eth2. Humm let > me make a question in my scenario here i have eth0(loc) 192.168.100.1 > <http://192.168.100.1>, eth2 192.168.1.3 <http://192.168.1.3> and the > modem adsl is attached in eth2 and when i connect my ppp link ppp0(net) > with this scenario i have to do this? > http://www.shorewall.net/PPTP.htm#PPTP_ADSLOnly if you use PPTP to connect to the modem and not PPPoE. -Tom -- Tom Eastep \ The ultimate result of shielding men from the effects of Shoreline, \ folly is to fill the world with fools. Washington, USA \ -- Herbert Spencer ------------------------------------------------------------------------ http://www.shorewall.net ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Tom Eastep wrote:> Fabio Correa wrote: >> good question...this net is the net of the adsl modem and eth2. Humm let >> me make a question in my scenario here i have eth0(loc) 192.168.100.1 >> <http://192.168.100.1>, eth2 192.168.1.3 <http://192.168.1.3> and the >> modem adsl is attached in eth2 and when i connect my ppp link ppp0(net) >> with this scenario i have to do this? >> http://www.shorewall.net/PPTP.htm#PPTP_ADSL > > Only if you use PPTP to connect to the modem and not PPPoE.Does restarting your PPP link replace /etc/resolv.conf? -Tom -- Tom Eastep \ The ultimate result of shielding men from the effects of Shoreline, \ folly is to fill the world with fools. Washington, USA \ -- Herbert Spencer ------------------------------------------------------------------------ http://www.shorewall.net ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
Tom,
Hhumm, i use pppoe. Another question! I did not put eth2 in any
config file, only eth0 as loc and ppp0 as net in the interfaces config file,
i have to configure eth2 ? i used the basic two interfaces exemple.
2008/10/1 Tom Eastep <teastep@shorewall.net>
> Fabio Correa wrote:
> > good question...this net is the net of the adsl modem and eth2. Humm
let
> > me make a question in my scenario here i have eth0(loc) 192.168.100.1
> > <http://192.168.100.1>, eth2 192.168.1.3
<http://192.168.1.3> and the
> > modem adsl is attached in eth2 and when i connect my ppp link
ppp0(net)
> > with this scenario i have to do this?
> > http://www.shorewall.net/PPTP.htm#PPTP_ADSL
>
> Only if you use PPTP to connect to the modem and not PPPoE.
>
> -Tom
> --
> Tom Eastep \ The ultimate result of shielding men from the effects of
> Shoreline, \ folly is to fill the world with fools.
> Washington, USA \ -- Herbert Spencer
> ------------------------------------------------------------------------
> http://www.shorewall.net
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer''s
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer''s
challenge
Build the coolest Linux based applications with Moblin SDK & win great
prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
Fabio Correa wrote:> Hhumm, i use pppoe. Another question! I did not put eth2 in > any config file, only eth0 as loc and ppp0 as net in the interfaces > config file, i have to configure eth2 ? i used the basic two interfaces > exemple.You do not need to configure eth2 unless you want to be able to connect to the web server built into the ADSL "Modem". I think you should still be focusing on why your firewall is trying to resolve DNS names through 192.168.1.1 -- THAT is going to slow down DNS name resolution which will make your "internet access slow". Remember that restarting your PPP link doesn''t change anything in Shorewall (unless you have scripted shorewall commands in your ppp user exits) -- so focusing on Shorewall is not going to solve this problem in my view. I would add though, that you should be sure that your Shorewall extension scripts like /etc/shorewall/start don''t have commands in them that might mess things up. -Tom -- Tom Eastep \ The ultimate result of shielding men from the effects of Shoreline, \ folly is to fill the world with fools. Washington, USA \ -- Herbert Spencer ------------------------------------------------------------------------ http://www.shorewall.net ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
I do not have any scripts, i made a test right now, i changed some rules and restart shorewall, the internet goes slow... but the dns in the machine is responding, i sent a ping to some urls and they are responding ok. I got two dump files, one after i reconnect and one before. i will send you maybe you find something in these. I beleive you that the problem is not in shorewall but always i made changes in shorewall this problem happens. I just started to work with shorewall and maybe i have done some mistake in somehere, thats the reason i asked you about these configurations. 2008/10/2 Tom Eastep <teastep@shorewall.net>> Fabio Correa wrote: > > Hhumm, i use pppoe. Another question! I did not put eth2 in any >> config file, only eth0 as loc and ppp0 as net in the interfaces config file, >> i have to configure eth2 ? i used the basic two interfaces exemple. >> > > You do not need to configure eth2 unless you want to be able to connect to > the web server built into the ADSL "Modem". > > I think you should still be focusing on why your firewall is trying to > resolve DNS names through 192.168.1.1 -- THAT is going to slow down DNS > name resolution which will make your "internet access slow". > > Remember that restarting your PPP link doesn''t change anything in Shorewall > (unless you have scripted shorewall commands in your ppp user exits) -- so > focusing on Shorewall is not going to solve this problem in my view. I would > add though, that you should be sure that your Shorewall extension scripts > like /etc/shorewall/start don''t have commands in them that might mess things > up. > > > -Tom > -- > Tom Eastep \ The ultimate result of shielding men from the effects of > Shoreline, \ folly is to fill the world with fools. > Washington, USA \ -- Herbert Spencer > ------------------------------------------------------------------------ > http://www.shorewall.net > > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer''s > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
apparently yes, but now i commented the line usepeerdns in conf. no more resolv.conf replaces by pppoe. I think dhcp also replaces the resolv.conf when the eth2 gets ip. i will set the ip for testing. 2008/10/1 Tom Eastep <teastep@shorewall.net>> Tom Eastep wrote: > > Fabio Correa wrote: > >> good question...this net is the net of the adsl modem and eth2. Humm let > >> me make a question in my scenario here i have eth0(loc) 192.168.100.1 > >> <http://192.168.100.1>, eth2 192.168.1.3 <http://192.168.1.3> and the > >> modem adsl is attached in eth2 and when i connect my ppp link ppp0(net) > >> with this scenario i have to do this? > >> http://www.shorewall.net/PPTP.htm#PPTP_ADSL > > > > Only if you use PPTP to connect to the modem and not PPPoE. > > Does restarting your PPP link replace /etc/resolv.conf? > > -Tom > -- > Tom Eastep \ The ultimate result of shielding men from the effects of > Shoreline, \ folly is to fill the world with fools. > Washington, USA \ -- Herbert Spencer > ------------------------------------------------------------------------ > http://www.shorewall.net > > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer''s > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > >------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer''s challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/