i have a Linux gateway performing NAT (SNAT and DNAT) with iptables_1.2.7aAssuming that the gateway running iptables is the root to the problem,
on both sides there are UNIX machines (SOLARIS)
telnet, ftp, ... works fine but when i mount on Solaris client a directory from Solaris nfs server via gateway i have problems with performance.
it starts with "normal speed" but it gets worse and worse. after reboot of this gateway it is ok but then again the same game.
have you tried to make a minimal working set of rules that exposes the problem? If yes then please state them.
Also, what is the load on the gateway when degradation occurs and is the degradation still present if you reboot one of the clients?
No - but I have a few clues :-)
does anybody have experiences with this problem ?
(best would be also a solution ... ;-)
thank you
Regards Anders Fugmann
-- Author of FIAIF FIAIF is an intelligent firewall http://www.fiaif.net