Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 85 replies
  • Subscribers 1 subscriber
  • Views 58042 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Browing Slowness

Alvin
Hi

Currently, I "locked down" my Firewall with NO LAN -> Internet = Allow Rule.

This way, it is 100% via the HTTP Proxy which works.

But it is Really Significant slowness as long as I disable the LAN -> Internet Rule.

For DNS, I set it to use Astaro who in turn use Open DNS.

But I do not understand how come the browsing performance is significantly slower.

If I just turn on the rule, it simply is faster.


This thread was automatically locked due to age.
Parents
  • 0
    - I enabled my LAN -> ANY = Allow Rule.
    - Indeed Web Browsing is Faster.

    Hmmm, the only reason this might make sense is related to DNS. In transparent mode, the client PC does DNS lookups.  How is your client PC configured for DNS?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    - I enabled my LAN -> ANY = Allow Rule.
    - Indeed Web Browsing is Faster.

    Hmmm, the only reason this might make sense is related to DNS. In transparent mode, the client PC does DNS lookups.  How is your client PC configured for DNS?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson
    Hmmm, the only reason this might make sense is related to DNS. In transparent mode, the client PC does DNS lookups.  How is your client PC configured for DNS?

    Cheers - Bob


    Balfson - 
    Network Services - DNS
    LAN is in Allowed Network
    DNS Forwarders is configured to use Open DNS 
    208.67.222.222
    208.67.220.220
    Unchecked the Box below which shows the DNS from my ISP.
    I configured LAN to be Allowed to use Astaro DNS Proxy.
    My Client DNS is set to Astaro (Default Gateway IP Adress)