/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */



My UDP timeout is set to 2 minutes (120). I do have a caching-only
nameserver running.

> -----Original Message-----
> From: Fuzzy Fox [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, July 12, 1999 4:22 PM
> To:   [EMAIL PROTECTED]
> Subject:      [Masq]  Re: IP MSQ Message
> 
> /* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
> */
> 
> 
> 
> Audie Pierre <[EMAIL PROTECTED]> wrote:
> >
> > Strictly business is being conducted behind the firewall.  Actually,
> > mostly DNS requests are using the UDP ports.
> 
> How high are your UDP timeouts set?  If you set them really high, like
> 15 minutes, then a large amount of DNS requests will end up filling up
> your port lists.
> 
> With such high DNS traffic, you really should set up a caching-only
> nameserver *on* the masq gateway.  This will prevent any need to
> masquerade DNS traffic, and will further speed up processing of
> redundant requests.  A win-win situation.
> 
> > The changes that I've made last Friday involve an upgrade from Redhat
> > 5.2 / Kernel 2.0.36 to Redhat 6.0 / Kernel 2.3.9.  Hopefully, that
> > will make a difference.
> 
> It won't.
> 
> > I also switched from ipfwadm to ipchains. 
> 
> Nor will that.
> 
> -- 
>    [EMAIL PROTECTED] (Fuzzy Fox)      || "Nothing takes the taste out of
> peanut
> sometimes known as David DeSimone  ||  butter quite like unrequited love."
>   http://www.dallas.net/~fox/      ||                       -- Charlie
> Brown
> 
> 
> _______________________________________________
> Masq maillist  -  [EMAIL PROTECTED]
> Admin requests can be handled at http://www.indyramp.com/masq-list/
> or email to [EMAIL PROTECTED]
> 
> PLEASE read the HOWTO and search the archives before posting.
> You can start your search at http://www.indyramp.com/masq/


_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/

Reply via email to