ftp to FC3 box very slow.

Hi,

I just installed FC3 on a test server. I managed to get vsftpd started.
However when I ftp from any box on the same network to the FC3 test
server the transfers are very very very slow. Actually it isn't really
the transfer, but the time it takes to connect to the next port.

Is there something i could have done wrong? What could cause this? Do
I need to play with iptables or something?

In setting up vsftpd, I only made two changes to the .conf file --
commented out the anon login and uncommented the local login.

Thanks

-Tom

On 16 Mar 2005 14:03:14 -0800, Tom Cat <(E-Mail Removed)> wrote:
> Hi,
>
> I just installed FC3 on a test server. I managed to get vsftpd started.
> However when I ftp from any box on the same network to the FC3 test
> server the transfers are very very very slow. Actually it isn't really
> the transfer, but the time it takes to connect to the next port.
>
> Is there something i could have done wrong? What could cause this? Do
> I need to play with iptables or something?

It is DNS timeout. Apparently Linux is having trouble resolving a name
for your client IP (which it does as a security check). Your ftp server
should have instructions about how to override that.

I personally run a caching nameserver (bind9), so I just added forward and
reverse zones for my LAN (per DNS HOWTO).

In comp.os.linux.networking Tom Cat <(E-Mail Removed)>:
> Hi,

> I just installed FC3 on a test server. I managed to get vsftpd started.
> However when I ftp from any box on the same network to the FC3 test
> server the transfers are very very very slow. Actually it isn't really
> the transfer, but the time it takes to connect to the next port.

> Is there something i could have done wrong? What could cause this? Do
> I need to play with iptables or something?

No. The problems is vsftpd trying to (reverse) lookup host/IP
name of the client, which if not possible takes some time until
timeout occurs.

Possible solutions:

- Setup DNS for your LAN if your haven't, if so the FC3 box is
just missing the proper nameserver entry. (www.tldp.org) has a
great DNS Howto.

- Setup /etc/hosts. ('man 5 hosts')

- Use proftpd or alike ftp server which allows to switch of DNS
lookups. (vsftpd IIRC doesn't)

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo (E-Mail Removed) | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 300: Digital Manipulator exceeding velocity
parameters

Instead of embarking on the DNS idea as some have suggested, I just
shut down iptables during the transfer. The transfers then proceeded
at an amazingly fast speed.