search

geerlingguy / ansible-role-firewall

Ansible Role - iptables Firewall configuration.
https://galaxy.ansible.com/geerlingguy/firewall/
MIT License
524 stars 217 forks source link

Move related,established rule to top. #72

Closed BlackestDawn closed 4 years ago

BlackestDawn commented 4 years ago

Quick testing on my part shows that having the "related,established" rule at the bottom can introduce a large delay in connection time if you have reject rules in the "additional rules" section. With no rules (FW completely open), no reject rule (FW mostly closed), or the "established,related" rule at the top (right before open section) in my tests shows a connection time of just over 1 second, with that rule at the bottom and reject rules I have connection times of just over 21 seconds.

stale[bot] commented 4 years ago

This issue has been marked 'stale' due to lack of recent activity. If there is no further activity, the issue will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark issues as stale.

stale[bot] commented 4 years ago

This issue has been closed due to inactivity. If you feel this is in error, please reopen the issue or file a new issue with the relevant details.