LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 11-09-2005, 04:45 PM   #1
Label2021
LQ Newbie
 
Registered: Aug 2004
Posts: 8

Rep: Reputation: 0
Major APF issues =(


Well I wanted to install the APF firewall to secure my server from DoS attacks and have a nice firewall in place. I installed the latest APF, it tol dme what ports I was using, I looked over them, everything looked fine, I added the TCP and UDP ports needed to my ingress connections (didnt mess with egress) started the firewall and all was well. I host many TeamSpeak servers (voice over IP communication for gamers/friends) and I notice that randomly some of the TS servers would stop respponding. Teamspeak handles one main server that has many mini servers, each mini server listening on its own UDP port. A simple mini server restart would make that certain TS server accessible again, but only to be blocked off sometime the next day. The right ports were open in the APF config under ingress so I wasnt sure what was going on. I then attempted adding the ports to my egress also, no luck. After this, I decided to bound my TS servers to a certain IP, and then use an iptables command to unblock that IP completely:

iptables -I INPUT 1 -d xx.xx.xx.xx -j ACCEPT
iptables -I OUTPUT 1 -d xx.xx.xx.xx -j ACCEPT

And at the same time went ahead and took those UDP ports out of my APF config for being open, since those two commands would open them manually. I then attempted:

iptables-save > /var/iptables_firewall
iptables-restore < /var/iptables_firewall

In hope that it would save this configuration and i wouldnt have to worry about it. Well every morning around 10:00 AM my time, it flushes those two commands I gave to unblock that IP, and APF takes over and blocks off the IP I was using for my TS servers. This means every day in the morning I have to re-enter those two iptables commands that unblock all on the IP xx.xx.xx.xx

Lately, I have also noticed speeds downloading from my server slower than 100 KBps, when i previously got around 1700 KBps, and it isnt just me. Does anyone have any ideas why APF would randomly cut off some UDP ports, making me restart the service on that port for it to work again. And any clue on the speed slow downs? The speed issue only started after I installed the firewall, and even after uninstalling APF speed is still a little screwy. I also flushed my iptables so Im thinking it may just be my server. However any help would be greatly appreciated. Thank you



-h4x0r-
 
Old 11-13-2005, 10:43 PM   #2
Label2021
LQ Newbie
 
Registered: Aug 2004
Posts: 8

Original Poster
Rep: Reputation: 0
bump?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Gentoo 2004.3 major issues with video libraries davidbalt Linux - Software 0 12-02-2004 05:13 PM
Major Virtual Host Config Issues klintonray Linux - Software 2 08-07-2003 08:20 PM
Major sound issues...I killed it! docGonzo2000 Slackware 6 05-20-2003 06:16 AM
Major Flash Issues Annex Linux - Software 3 05-01-2002 11:05 PM
HELP!!!! Major issues jsut came up! Stephanie Linux - General 6 09-02-2001 04:15 PM


All times are GMT -5. The time now is 03:54 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration