firewalld with HUGE list of ip to drop

[Karl Auer]

On Wed, 2024-04-10 at 18:08 -0400, Jerry Geis wrote:
> Anyway if I stop firewalld the network performance jumps WAY back up
> to over 800M but as soon as I restart firewalld - wait a while -
> network performance drops again to around 10M

How long is "a while"?

> I also tried stopping firewalld and just use IPtables - same thing
> happens.

So iptables also starts fine but slows after "a while"?

Who *is* allowed to access your servers? If the answer is "nobody but
me", then just whitelist yourself and have a default DROP rule.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au, he/him)
http://www.biplane.com.au/kauer