iptables and masquerading - slow to initiate connection

From: Rob (rw133_at_excite.com)
Date: 08/15/04


Date: 15 Aug 2004 13:44:36 -0700

Howdy, all!

I am using iptables on a dual-NIC Mandrake 10 box as a home network
masquerading firewall and DNS server.

In general, everything works (internet name resolution and web
browsing) except that initial response times are very slow - browsing
to sites from the linux box always fail immediately on the first
attempt and I need to click on the reload button, and pages are slow
to respond from my Windows XP workstation behind the firewall.

If I ping a host on the internet from either the firewall or from my
workstation behind the firewall, name resolution is very fast but the
first two ping replies are always lost:

>ping mail.yahoo.com

Pinging login.yahoo.akadns.net [216.109.127.60] with 32 bytes of data:

Request timed out.
Request timed out.
Reply from 216.109.127.60: bytes=32 time=55ms TTL=241
Reply from 216.109.127.60: bytes=32 time=44ms TTL=241

Ping statistics for 216.109.127.60:
    Packets: Sent = 4, Received = 2, Lost = 2 (50% loss),
Approximate round trip times in milli-seconds:
    Minimum = 44ms, Maximum = 55ms, Average = 49ms

Any ideas? This is driving me crazy!

Thanks,

Rob