Menu

#15 slow to initialize iptables

fixed
None
Normal
2015-04-12
2014-07-21
cboldt
No

sshguard was tking several minutes to start up, and on running in debug mode, I noticed a slow processing of reverse lookups as "iptables -L" was run.

If the iptables initialization command is changed to "iptables -n -L sshguard", there are two benefits. Initialization is a snap, and there is a check for the necessary "sshguard" chain in the iptables ruleset. That second benefit might help users who think they have sshguard setup (it starts okay), only to run into an error when sshguard detects an action-worthy incident.

Discussion

  • Kevin Zheng

    Kevin Zheng - 2015-04-12

    Fixed in e18e89b, thanks!

     
  • Kevin Zheng

    Kevin Zheng - 2015-04-12
    • status: open --> fixed
    • assigned_to: Kevin Zheng
    • Priority: 2 --> Normal
     

Log in to post a comment.