Firewall & DSL performance

[Nathan Kinkade]

On Wed, Mar 10, 2004 at 08:10:05AM -0600, Darryl Hoar wrote:
> Well,
> last night I changed the ipf.rules file to be:
> 
> pass in all  keep state
> pass out all keep state
> 
> to completely open my firewall to test my performance.
> 
> Well, it didn't make a lick of difference.  Still got
> 700K.
> 
> If I open the firewall like I did, shouldn't performance
> be a non issue ?
> 
> thanks,
> Darryl 

I wouldn't rule out the inside network card.  I recently noticed
something similar here and it turned out that, though a particular
network card worked on the whole, it's performace was inexplicable
miserable.  We swapped out the cheap SiS card with a good 3Com card and
the problem was solved.  Is there any way that you could get ahold of
another NIC to test?

Nathan
-- 
gpg --keyserver pgp.mit.edu --recv-keys D8527E49
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040310/a50e4c98/attachment.bin