FC2 + PowerEdge 2650 + smp kernel + iptables rules loading slow

Hi,

I recently noticed the following:

OS: FC2
Kernel: 2.6.8smp and 2.6.8
Hardware: Dell PowerEdge with 2 x 2.8 CPUs, 2 GB RAM etc. iptables version: iptables-1.2.9-2.3.1

The thing is:

1 - when booting a 2.6.8smp kernel (and as well 2.6.Xsmp) it takes about 1 min and 25 seconds to load 114 iptables rules.

2 - when booting a 2.6.8 kernel (so without smp) it only takes 20 seconds to load the same rules.

I've tried several iptables verions but the results were the same.

The question: why? :)

I know that there was a bug regarding Dell PowerEdge 2650 and FC1 with smp kernels (the machine wasn't booting) but does now anyone have a clue where to look or how to solve this issue?

It's a waste to use e dual CPU machine with a non-smp kernel and I'm not allowed to install another OS because of the company policies.

Thanks for you support,
Iulian Topliceanu

Maybe you should ask on the netfilter newsgroup.

Sorry, I thought I was on another newsgroup.

My apologies.

Ugo

isn't the latest FC2 kernel 2.6.9-1.6? i would go ahead and try that, as i had nothing but problems with the 2.6.8 FC2 kernels.

did you have this problem with 2.6.7 as well?

-j

--
"Here we have an ordinary square.
Whoa! Slow down egghead!"
--The Simpsons

I've tried 2.6.5, 2.6.7, 2.6.8 and 2.6.9. All smp.

I did not notice any changes.

Regards,
Iulian

just first guess.

are not you trying to add rules which use DNS or other name system names instead of IP addresses?
(before the name system is availaible(notwork down) or after name system become unavailaible(iptables policies and rules))