Shorewall users - Nov 2002 - ip frag / defrag latency.

--=-mIogSkSG8HjWN56JSL46
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Tom,

  If you have connection tracking enabled, then you have auto-magically
ordered all packets to be defragged is that correct?   I wonder if there
is any noticible latency, especially in on-line games with defragging
packets.

  Are there any ways to make an exception - to avoid tracking certain
connections etc?  If you have any tips, please let me know.

thanks,
  JOshua

--=20
VB programmers ask why no one takes them seriously,=20
it''s somewhat akin to a McDonalds manager asking employees=20
why they don''t take their ''career'' seriously.

--=-mIogSkSG8HjWN56JSL46
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQA9yz8WcweM6t71VHsRAimzAKCHTQ8TdTD5L184JLtKHdJ5NUQl4QCgrFGV
rV0YHvQZEEDC7SZFGrWAOSU=TTql
-----END PGP SIGNATURE-----

--=-mIogSkSG8HjWN56JSL46--

--On Thursday, November 07, 2002 8:35 PM -0800 Joshua Schmidlkofer 
<menion@asylumwear.com> wrote:
> Tom,
>
>   If you have connection tracking enabled, then you have auto-magically
> ordered all packets to be defragged is that correct?
Yes.
> I wonder if there
> is any noticible latency, especially in on-line games with defragging
> packets.
I''ve no idea.
>
>   Are there any ways to make an exception - to avoid tracking certain
> connections etc?
No. There is no way to bypass connection tracking in Shorewall.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net