Retourner au contenu associé (entrée de forum : [Résolu] Démarrage devenu très lent)
Posté par alouali (site web personnel) le 01 août 2016 à 13:15. En réponse au message [Résolu] Démarrage devenu très lent. Évalué à 1.
Oui effectivement ça me paraissait un peu excessif, mais comme je n'avais pas de point de comparaison, et que je ne savais pas si c'était bloquant.
De plus je n'ai jamais touché à Shorewall ou à iptables, j'utilise juste le centre de contrôle pour tout bloquer sauf ssh.
Je vais donc essayer de désactiver le pare-feu, pour voir si ça change quelque chose.
En attendant, si je fais cat /var/log/shorewall-init.log j'ai ça, qui semble durer 2 secondes, donc je ne vois pas bien ce qui ne va pas :
Aug 1 7:32:25 Processing /etc/shorewall/params ... Aug 1 7:32:25 Processing /etc/shorewall/shorewall.conf... Aug 1 7:32:25 Loading Modules... Aug 1 7:32:25 Compiling /etc/shorewall/zones... Aug 1 7:32:25 Compiling /etc/shorewall/interfaces... Aug 1 7:32:25 Interface "net enp2s0 detect" Validated Aug 1 7:32:25 Determining Hosts in Zones... Aug 1 7:32:25 net (ipv4) Aug 1 7:32:25 enp2s0:0.0.0.0/0 Aug 1 7:32:25 fw (firewall) Aug 1 7:32:25 Locating Action Files... Aug 1 7:32:25 Compiling /etc/shorewall/policy... Aug 1 7:32:25 Policy for fw to net is ACCEPT using chain fw-net Aug 1 7:32:25 Policy for net to fw is DROP using chain net-all Aug 1 7:32:25 Policy for net to fw is REJECT using chain all-all Aug 1 7:32:25 Policy for fw to net is REJECT using chain all-all Aug 1 7:32:25 Running /etc/shorewall/initdone... Aug 1 7:32:25 Compiling TCP Flags filtering... Aug 1 7:32:25 Compiling Kernel Route Filtering... Aug 1 7:32:25 Compiling Martian Logging... Aug 1 7:32:25 Compiling MAC Filtration -- Phase 1... Aug 1 7:32:25 Chain enp2s0_iop deleted Aug 1 7:32:25 Chain enp2s0_fop deleted Aug 1 7:32:25 Compiling /etc/shorewall/rules... Aug 1 7:32:25 Rule "ACCEPT net fw tcp 22 -" Compiled Aug 1 7:32:25 Compiling /etc/shorewall/conntrack... Aug 1 7:32:25 Conntrack rule "CT:helper:amanda:PO - - udp 10080" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:amanda:PO - - udp 10080" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:ftp:PO - - tcp 21" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:ftp:PO - - tcp 21" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:RAS:PO - - udp 1719" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:RAS:PO - - udp 1719" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:Q.931:PO - - tcp 1720" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:Q.931:PO - - tcp 1720" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:irc:PO - - tcp 6667" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:irc:PO - - tcp 6667" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:netbios-ns:PO - - udp 137" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:netbios-ns:PO - - udp 137" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:pptp:PO - - tcp 1723" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:pptp:PO - - tcp 1723" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:sane:PO - - tcp 6566" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:sane:PO - - tcp 6566" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:sip:PO - - udp 5060" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:sip:PO - - udp 5060" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:snmp:PO - - udp 161" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:snmp:PO - - udp 161" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:tftp:PO - - udp 69" Compiled Aug 1 7:32:25 Conntrack rule "CT:helper:tftp:PO - - udp 69" Compiled Aug 1 7:32:25 Compiling MAC Filtration -- Phase 2... Aug 1 7:32:25 Applying Policies... Aug 1 7:32:25 Compiling /usr/share/shorewall/action.Drop for chain Drop... Aug 1 7:32:25 Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast... Aug 1 7:32:25 ..Expanding Macro /usr/share/shorewall/macro.AllowICMPs... Aug 1 7:32:25 Rule "PARAM - - icmp fragmentation-needed" Compiled Aug 1 7:32:25 Rule "PARAM - - icmp time-exceeded" Compiled Aug 1 7:32:25 ..End Macro /usr/share/shorewall/macro.AllowICMPs Aug 1 7:32:25 ..Expanding inline action /usr/share/shorewall/action.Invalid... Aug 1 7:32:25 ..End inline action /usr/share/shorewall/action.Invalid Aug 1 7:32:25 ..Expanding Macro /usr/share/shorewall/macro.SMB... Aug 1 7:32:25 Rule "PARAM - - udp 135,445" Compiled Aug 1 7:32:25 Rule " PARAM - - udp 137:139" Compiled Aug 1 7:32:25 Rule "PARAM - - udp 1024: 137" Compiled Aug 1 7:32:25 Rule "PARAM - - tcp 135,139,445" Compiled Aug 1 7:32:25 ..End Macro /usr/share/shorewall/macro.SMB Aug 1 7:32:25 ..Expanding Macro /usr/share/shorewall/macro.DropUPnP... Aug 1 7:32:25 Rule "PARAM - - udp 1900" Compiled Aug 1 7:32:25 ..End Macro /usr/share/shorewall/macro.DropUPnP Aug 1 7:32:25 ..Expanding inline action /usr/share/shorewall/action.NotSyn... Aug 1 7:32:25 ..End inline action /usr/share/shorewall/action.NotSyn Aug 1 7:32:25 ..Expanding Macro /usr/share/shorewall/macro.DropDNSrep... Aug 1 7:32:25 Rule "PARAM - - udp - 53" Compiled Aug 1 7:32:25 ..End Macro /usr/share/shorewall/macro.DropDNSrep Aug 1 7:32:25 Policy DROP from net to fw using chain net-fw Aug 1 7:32:25 Policy ACCEPT from fw to net using chain fw-net Aug 1 7:32:25 Generating Rule Matrix... Aug 1 7:32:25 Handling complex zones... Aug 1 7:32:25 Entering main matrix-generation loop... Aug 1 7:32:25 Chain enp2s0_in deleted Aug 1 7:32:25 Finishing matrix... Aug 1 7:32:25 Compiling /usr/share/shorewall/action.Reject for chain Reject... Aug 1 7:32:25 ..Expanding Macro /usr/share/shorewall/macro.AllowICMPs... Aug 1 7:32:25 Rule "PARAM - - icmp fragmentation-needed" Compiled Aug 1 7:32:25 Rule "PARAM - - icmp time-exceeded" Compiled Aug 1 7:32:25 ..End Macro /usr/share/shorewall/macro.AllowICMPs Aug 1 7:32:25 ..Expanding inline action /usr/share/shorewall/action.Invalid... Aug 1 7:32:25 ..End inline action /usr/share/shorewall/action.Invalid Aug 1 7:32:25 ..Expanding Macro /usr/share/shorewall/macro.SMB... Aug 1 7:32:25 Rule "PARAM - - udp 135,445" Compiled Aug 1 7:32:25 Rule " PARAM - - udp 137:139" Compiled Aug 1 7:32:25 Rule "PARAM - - udp 1024: 137" Compiled Aug 1 7:32:25 Rule "PARAM - - tcp 135,139,445" Compiled Aug 1 7:32:25 ..End Macro /usr/share/shorewall/macro.SMB Aug 1 7:32:25 ..Expanding Macro /usr/share/shorewall/macro.DropUPnP... Aug 1 7:32:25 Rule "PARAM - - udp 1900" Compiled Aug 1 7:32:25 ..End Macro /usr/share/shorewall/macro.DropUPnP Aug 1 7:32:25 ..Expanding inline action /usr/share/shorewall/action.NotSyn... Aug 1 7:32:25 ..End inline action /usr/share/shorewall/action.NotSyn Aug 1 7:32:25 ..Expanding Macro /usr/share/shorewall/macro.DropDNSrep... Aug 1 7:32:25 Rule "PARAM - - udp - 53" Compiled Aug 1 7:32:25 ..End Macro /usr/share/shorewall/macro.DropDNSrep Aug 1 7:32:25 Chain sfilter deleted Aug 1 7:32:25 Chain enp2s0_fwd deleted Aug 1 7:32:25 Creating iptables-restore input... Aug 1 7:32:25 Shorewall configuration compiled to /var/lib/shorewall/.start août 1 07:32:26 Starting Shorewall.... août 1 07:32:26 Initializing... août 1 07:32:26 Processing /etc/shorewall/init ... août 1 07:32:26 Processing /etc/shorewall/tcclear ... août 1 07:32:26 Setting up Route Filtering... août 1 07:32:26 Setting up Martian Logging... août 1 07:32:26 Setting up Proxy ARP... août 1 07:32:26 Disabling Kernel Automatic Helper Association août 1 07:32:26 Preparing iptables-restore input... août 1 07:32:26 Running /sbin/iptables-restore... août 1 07:32:26 Processing /etc/shorewall/start ... août 1 07:32:26 Processing /etc/shorewall/started ... août 1 07:32:26 done.
AltStyle によって変換されたページ (->オリジナル) / アドレス: モード: デフォルト 音声ブラウザ ルビ付き 配色反転 文字拡大 モバイル
[^] # Re: /var/log
Posté par alouali (site web personnel) . En réponse au message [Résolu] Démarrage devenu très lent. Évalué à 1.
Oui effectivement ça me paraissait un peu excessif, mais comme je n'avais pas de point de comparaison, et que je ne savais pas si c'était bloquant.
De plus je n'ai jamais touché à Shorewall ou à iptables, j'utilise juste le centre de contrôle pour tout bloquer sauf ssh.
Je vais donc essayer de désactiver le pare-feu, pour voir si ça change quelque chose.
En attendant, si je fais cat /var/log/shorewall-init.log j'ai ça, qui semble durer 2 secondes, donc je ne vois pas bien ce qui ne va pas :