Hello, I am running ipqueue and snort-inline. However, I find that the moment that I add iptables -A FORWARD -j QUEUE nmap scans slow down by an order of magnitude. It is quite important for me to understand why this is happening. Any help is appreciated. Also, the firewall machine cpu and mem load is real low, so it certainly doesn't see to be running out of capacity (10 Mb network) Could a machine start dropping packets even though there is not significant CPU or Mem load and where will it report dropped packets? The kernel has the br-nf patches loaded and the firewall is in bridged mode. Thanks, pieter -- ----------------------------- Pieter Claassen pieter@xxxxxxxxxxxxxx http://www.openauth.co.uk OpenAuth Tel: 01344 390530 DDI: 01344 390630/390631 Fax number: 01344 390700 Mobile: 0776 665 6924 Highview House Charles Square Bracknell Berkshire RG12 1DF TERMS AND CONDITIONS (i)The information contained in this email and attachments is only intended for the addressed recipient(s) and may not be distributed or viewed by any other party without the explicit consent of the sender. If you have received this message by accident, please contact Pieter Claassen (pieter@xxxxxxxxxxxxxx) and destroy any electronic or physical copies of the information contained in it, immediately. (ii)This email is not certified to be virus free and OpenAuth accepts no liability for losses arising from you receiving this email. (iii)Any digital signatures (if present) used to authenticate this email, only serves to allow you to verify the originating email address of the sender and should not be relied upon to prove identity or base financial transactions on, unless the Certificate Practice Statement that the signature references, explicitly states differently. (iv)This email may be subjected to further terms and conditions as published on the company website at http://www.openauth.co.uk. If you need to rely on the information contained in this email in any way, then you should read those terms and conditions to understand how much you can trust the information in this email. (v)OpenAuth retains the copyright on any relevant material that is included in this email.
