Hot answers tagged iptables
Can you resolve the name of example.com? If you block access to any name service, your machine won't be able to reach example.com - you would have to add the host example.com and his ip address in the /etc/hosts or add an iptables exception for your DNS. As posted here, an exception for DNS lookups would be: iptables -A INPUT -p udp --source-port 53 -j ...
Tweaking the Linux kernel for high network throughput is an art based on balance. Increasing the Connection Tracker Table is fine, but it means more sockets are potentially used, this in turn means that the system needs more File Descriptors, and the wheel goes on... In your case, I would start with the following kernel settings: net.core.somaxconn and ...
Well, /usr/lib/systemd/system/nfs-mountd.service calls rpc.mountd with a $RPCMOUNTDARGS option which differs from RPCMOUNTDOPTS in /etc/sysconfig/nfs. There's another service called nfs-config.service which preprocess NFS configuration and puts it's output to /run/sysconfig/nfs-utils and RPCMOUNTDOPTS translates to RPCMOUNTDARGS. The nfs.service though ...
It could be because of the DNS, can you check if you can resolve some of the domain names that you have in your rules?
Only top voted, non community-wiki answers of a minimum length are eligible