firewalld with HUGE list of ip to drop

[Jerry Geis]

Sent from my iPhone

> On Apr 11, 2024, at 9:14 AM, Karl Auer <kauer at biplane.com.au> wrote:
> 
> On Wed, 2024-04-10 at 18:08 -0400, Jerry Geis wrote:
>> Anyway if I stop firewalld the network performance jumps WAY back up
>> to over 800M but as soon as I restart firewalld - wait a while -
>> network performance drops again to around 10M
> 
> How long is "a while"?
> 
>> I also tried stopping firewalld and just use IPtables - same thing
>> happens.
> 
> So iptables also starts fine but slows after "a while"?
> 
> Who *is* allowed to access your servers? If the answer is "nobody but
> me", then just whitelist yourself and have a default DROP rule.
> 
> Regards, K.
> 
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Karl Auer (kauer at biplane.com.au, he/him)
> http://www.biplane.com.au/kauer
> 
> 
> 
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

It takes like 20 min to load all the rules
There is a community that access the servers and they are all over the USA

Thanks 

Jerry