Subject: Re: CVS performance question
To: walt <>
From: Brian A. Seklecki <>
List: current-users
Date: 02/05/2004 14:32:01
On Thu, 2004-02-05 at 14:20, walt wrote:
> At least several of us have had problems updating -CURRENT sources with CVS
> the last several days, so I started poking around and discovered that my
> firewall was blocking incoming tcp connections from the netbsd server.

Walt: both cvs via pserver and cvs via ssh(1) use a single outbound TCP
socket...if you're using a IPF firewall ruleset, you can append a "keep
state" stanza with your default "pass out" rule to permit reciprocal
traffic flows.

Also, try to use a mirror, use traceroute(1) to determine the closest
mirror to you.


> I opened a hole for incoming tcp connections from port 2401 and everything
> started to work again, although VERY slowly (i.e. slower than last week).
> I've been tracking netbsd -CURRENT for about a year and never had this

we would need to see your ipf log excerpts.

> problem until 4 or 5 days ago.  I didn't change anything with my firewall.
> So, why the sudden change in behavior?  Any ideas?  A new CVS version?