slow download through webserver problem

Discussion in 'Technical' started by snewp, Apr 22, 2008.

  1. snewp

    snewp New Member

    i have a webserver installed. when i try to download a file from the server it will just give me 2kbps download rate which is way below my normal download rate. tried to download on my test box (same location with the webserver) it gives me my normal download rate. and let my friend try, still same download rate at 2kbps. i did try to change the network cable, no go. i did try to switch to other router port, still no go. btw, even in sftp it still gives me 2kbps. after a while of waiting it says it's completed but when i try to unzip the file it says corrupted and file size is 0. did try ping and it's good, no loses. are there any other ways of troubleshooting this problem?
     
    snewp, Apr 22, 2008
    #1
  2. falko

    falko Super Moderator Howtoforge Staff

    Are there any errors in your log files?
     
    falko, Apr 23, 2008
    #2
  3. snewp

    snewp New Member

    hi,

    i can't see any errors in the log files. it's really unusual coz my test and webserver box have the same configuration. i even reinstalled my webserver box but still got the same issue.
     
    snewp, Apr 24, 2008
    #3
  4. falko

    falko Super Moderator Howtoforge Staff

    Do you have mod_throttle or mod_cband installed?
     
    falko, Apr 25, 2008
    #4
  5. snewp

    snewp New Member

    nope. i didn't install either of the two.
     
    snewp, Apr 27, 2008
    #5
  6. falko

    falko Super Moderator Howtoforge Staff

    Which distribution are you using?
     
    falko, Apr 28, 2008
    #6
  7. snewp

    snewp New Member

    i'm currently using debian etch.
     
    snewp, Apr 30, 2008
    #7
  8. falko

    falko Super Moderator Howtoforge Staff

    What's the output of
    Code:
    ls -la /etc/apache2/mods-enabled
    ? What's in /etc/apache2/httpd.conf?
     
    falko, May 1, 2008
    #8
  9. snewp

    snewp New Member

    mods-enabled:
    drwxr-xr-x 2 root root 4096 2008-04-21 18:54 .
    drwxr-xr-x 7 root root 4096 2008-04-20 19:15 ..
    lrwxrwxrwx 1 root root 40 2008-04-21 18:54 actions.load -> /etc/apache2/mods-available/actions.load
    lrwxrwxrwx 1 root root 28 2008-04-20 19:15 alias.load -> ../mods-available/alias.load
    lrwxrwxrwx 1 root root 33 2008-04-20 19:15 auth_basic.load -> ../mods-available/auth_basic.load
    lrwxrwxrwx 1 root root 33 2008-04-20 19:15 authn_file.load -> ../mods-available/authn_file.load
    lrwxrwxrwx 1 root root 36 2008-04-20 19:15 authz_default.load -> ../mods-available/authz_default.load
    lrwxrwxrwx 1 root root 38 2008-04-20 19:15 authz_groupfile.load -> ../mods-available/authz_groupfile.load
    lrwxrwxrwx 1 root root 33 2008-04-20 19:15 authz_host.load -> ../mods-available/authz_host.load
    lrwxrwxrwx 1 root root 33 2008-04-20 19:15 authz_user.load -> ../mods-available/authz_user.load
    lrwxrwxrwx 1 root root 32 2008-04-20 19:15 autoindex.load -> ../mods-available/autoindex.load
    lrwxrwxrwx 1 root root 26 2008-04-20 19:15 cgi.load -> ../mods-available/cgi.load
    lrwxrwxrwx 1 root root 26 2008-04-20 19:15 dir.conf -> ../mods-available/dir.conf
    lrwxrwxrwx 1 root root 26 2008-04-20 19:15 dir.load -> ../mods-available/dir.load
    lrwxrwxrwx 1 root root 26 2008-04-20 19:15 env.load -> ../mods-available/env.load
    lrwxrwxrwx 1 root root 30 2008-04-20 19:19 include.load -> ../mods-available/include.load
    lrwxrwxrwx 1 root root 27 2008-04-20 19:15 mime.load -> ../mods-available/mime.load
    lrwxrwxrwx 1 root root 36 2008-04-21 05:54 mod-security2.load -> ../mods-available/mod-security2.load
    lrwxrwxrwx 1 root root 34 2008-04-20 19:15 negotiation.load -> ../mods-available/negotiation.load
    lrwxrwxrwx 1 root root 27 2008-04-20 19:18 php5.conf -> ../mods-available/php5.conf
    lrwxrwxrwx 1 root root 27 2008-04-20 19:18 php5.load -> ../mods-available/php5.load
    lrwxrwxrwx 1 root root 30 2008-04-20 19:19 rewrite.load -> ../mods-available/rewrite.load
    lrwxrwxrwx 1 root root 31 2008-04-20 19:15 setenvif.load -> ../mods-available/setenvif.load
    lrwxrwxrwx 1 root root 26 2008-04-20 19:19 ssl.conf -> ../mods-available/ssl.conf
    lrwxrwxrwx 1 root root 26 2008-04-20 19:19 ssl.load -> ../mods-available/ssl.load
    lrwxrwxrwx 1 root root 29 2008-04-20 19:15 status.load -> ../mods-available/status.load
    lrwxrwxrwx 1 root root 29 2008-04-20 19:19 suexec.load -> ../mods-available/suexec.load
    lrwxrwxrwx 1 root root 32 2008-04-21 05:54 unique_id.load -> ../mods-available/unique_id.load

    there nothing on httpd.conf
     
    snewp, May 2, 2008
    #9
  10. falko

    falko Super Moderator Howtoforge Staff

    I see you're using mod_security. Can you disable mod_security and try a downoad? If it's faster then we know it has to do with mod_security.
     
    falko, May 3, 2008
    #10
  11. snewp

    snewp New Member

    disabled mod_security but still no go.
     
    snewp, May 4, 2008
    #11
  12. falko

    falko Super Moderator Howtoforge Staff

    Are you using a firewall? What's the output of
    Code:
    iptables -L
    ?
     
    falko, May 5, 2008
    #12
  13. snewp

    snewp New Member

    Chain INPUT (policy DROP)
    target prot opt source destination
    ACCEPT 0 -- anywhere anywhere
    ACCEPT 0 -- anywhere anywhere state ESTABLISHED
    ACCEPT tcp -- anywhere anywhere state RELATED tcp dpts:1024:65535
    ACCEPT udp -- anywhere anywhere state RELATED udp dpts:1024:65535
    ACCEPT icmp -- anywhere anywhere state RELATED
    HOST_BLOCK 0 -- anywhere anywhere
    SPOOF_CHK 0 -- anywhere anywhere
    LOG tcp -- anywhere anywhere tcp dpt:www state NEW limit: avg 3/min burst 15 LOG level info prefix `TCP INPUT log: '
    LOG tcp -- anywhere anywhere tcp dpt:auth state NEW limit: avg 3/min burst 15 LOG level info prefix `TCP INPUT log: '
    LOG tcp -- anywhere anywhere tcp dpt:4545 state NEW limit: avg 3/min burst 15 LOG level info prefix `TCP INPUT log: '
    LOG tcp -- anywhere anywhere tcp dpt:https state NEW limit: avg 3/min burst 15 LOG level info prefix `TCP INPUT log: '
    LOG tcp -- anywhere anywhere tcp dpts:12000:24444 state NEW limit: avg 3/min burst 15 LOG level info prefix `TCP INPUT log: '
    VALID_CHK 0 -- anywhere anywhere
    EXT_INPUT_CHAIN !icmp -- anywhere anywhere state NEW
    EXT_INPUT_CHAIN icmp -- anywhere anywhere state NEW limit: avg 20/sec burst 100
    EXT_ICMP_CHAIN icmp -- anywhere anywhere state NEW
    LOG 0 -- anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `Dropped INPUT packet: '
    DROP 0 -- anywhere anywhere

    Chain FORWARD (policy DROP)
    target prot opt source destination
    ACCEPT 0 -- anywhere anywhere
    TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
    ACCEPT 0 -- anywhere anywhere state ESTABLISHED
    ACCEPT tcp -- anywhere anywhere state RELATED tcp dpts:1024:65535
    ACCEPT udp -- anywhere anywhere state RELATED udp dpts:1024:65535
    ACCEPT icmp -- anywhere anywhere state RELATED
    HOST_BLOCK 0 -- anywhere anywhere
    SPOOF_CHK 0 -- anywhere anywhere
    VALID_CHK 0 -- anywhere anywhere
    LOG 0 -- anywhere anywhere limit: avg 1/min burst 3 LOG level info prefix `Dropped FORWARD packet: '
    DROP 0 -- anywhere anywhere

    Chain OUTPUT (policy ACCEPT)
    target prot opt source destination
    TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
    ACCEPT 0 -- anywhere anywhere state ESTABLISHED
    LOG 0 -f anywhere anywhere limit: avg 3/min burst 5 LOG level info prefix `FRAGMENTED PACKET (OUT): '
    DROP 0 -f anywhere anywhere
    EXT_OUTPUT_CHAIN 0 -- anywhere anywhere

    Chain EXT_ICMP_CHAIN (1 references)
    target prot opt source destination
    LOG icmp -- anywhere anywhere icmp echo-request limit: avg 12/hour burst 1 LOG level info prefix `ICMP-request(ping) flood: '
    LOG icmp -- anywhere anywhere icmp destination-unreachable limit: avg 12/hour burst 1 LOG level info prefix `ICMP-unreachable flood: '
    LOG icmp -- anywhere anywhere icmp source-quench limit: avg 12/hour burst 1 LOG level info prefix `ICMP-source-quench flood: '
    LOG icmp -- anywhere anywhere icmp time-exceeded limit: avg 12/hour burst 1 LOG level info prefix `ICMP-time-exceeded flood: '
    LOG icmp -- anywhere anywhere icmp parameter-problem limit: avg 12/hour burst 1 LOG level info prefix `ICMP-param.-problem flood: '
    DROP icmp -- anywhere anywhere icmp echo-request
    DROP icmp -- anywhere anywhere icmp destination-unreachable
    DROP icmp -- anywhere anywhere icmp source-quench
    DROP icmp -- anywhere anywhere icmp time-exceeded
    DROP icmp -- anywhere anywhere icmp parameter-problem
    LOG icmp -- anywhere anywhere limit: avg 12/hour burst 1 LOG level info prefix `ICMP(other) flood: '
    DROP icmp -- anywhere anywhere

    Chain EXT_INPUT_CHAIN (2 references)
    target prot opt source destination
    LOG tcp -- anywhere anywhere tcp dpt:0 limit: avg 6/hour burst 1 LOG level info prefix `TCP port 0 OS fingerprint: '
    LOG udp -- anywhere anywhere udp dpt:0 limit: avg 6/hour burst 1 LOG level info prefix `UDP port 0 OS fingerprint: '
    DROP tcp -- anywhere anywhere tcp dpt:0
    DROP udp -- anywhere anywhere udp dpt:0
    LOG tcp -- anywhere anywhere tcp spt:0 limit: avg 6/hour burst 5 LOG level info prefix `TCP source port 0: '
    LOG udp -- anywhere anywhere udp spt:0 limit: avg 6/hour burst 5 LOG level info prefix `UDP source port 0: '
    DROP tcp -- anywhere anywhere tcp spt:0
    DROP udp -- anywhere anywhere udp spt:0
    ACCEPT tcp -- anywhere anywhere tcp dpt:www
    ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
    ACCEPT tcp -- anywhere anywhere tcp dpt:auth
    ACCEPT tcp -- anywhere anywhere tcp dpt:https
    ACCEPT tcp -- anywhere anywhere tcp dpt:4545
    ACCEPT tcp -- anywhere anywhere tcp dpts:12000:24444
    LOG icmp -- anywhere anywhere icmp echo-request limit: avg 3/min burst 1 LOG level info prefix `ICMP-request: '
    LOG icmp -- anywhere anywhere icmp destination-unreachable limit: avg 12/hour burst 1 LOG level info prefix `ICMP-unreachable: '
    LOG icmp -- anywhere anywhere icmp source-quench limit: avg 12/hour burst 1 LOG level info prefix `ICMP-source-quench: '
    LOG icmp -- anywhere anywhere icmp time-exceeded limit: avg 12/hour burst 1 LOG level info prefix `ICMP-time-exceeded: '
    LOG icmp -- anywhere anywhere icmp parameter-problem limit: avg 12/hour burst 1 LOG level info prefix `ICMP-param.-problem: '
    LOG tcp -- anywhere anywhere tcp dpts:1024:65535 flags:!FIN,SYN,RST,ACK/SYN limit: avg 3/min burst 5 LOG level info prefix `Stealth scan (UNPRIV)?: '
    LOG tcp -- anywhere anywhere tcp dpts:0:1023 flags:!FIN,SYN,RST,ACK/SYN limit: avg 3/min burst 5 LOG level info prefix `Stealth scan (PRIV)?: '
    DROP tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN
    LOG tcp -- anywhere anywhere tcp dpts:0:1023 limit: avg 6/min burst 2 LOG level info prefix `Connection attempt (PRIV): '
    LOG udp -- anywhere anywhere udp dpts:0:1023 limit: avg 6/min burst 2 LOG level info prefix `Connection attempt (PRIV): '
    LOG tcp -- anywhere anywhere tcp dpts:1024:65535 limit: avg 6/min burst 2 LOG level info prefix `Connection attempt (UNPRIV): '
    LOG udp -- anywhere anywhere udp dpts:1024:65535 limit: avg 6/min burst 2 LOG level info prefix `Connection attempt (UNPRIV): '
    DROP tcp -- anywhere anywhere
    DROP udp -- anywhere anywhere
    DROP icmp -- anywhere anywhere
    LOG 0 -- anywhere anywhere limit: avg 1/min burst 5 LOG level info prefix `Other-IP connection attempt: '
    DROP 0 -- anywhere anywhere

    Chain EXT_OUTPUT_CHAIN (1 references)
    target prot opt source destination

    Chain HOST_BLOCK (2 references)
    target prot opt source destination

    Chain MAC_FILTER (0 references)
    target prot opt source destination

    Chain RESERVED_NET_CHK (0 references)
    target prot opt source destination
    LOG 0 -- 10.0.0.0/8 anywhere limit: avg 1/min burst 1 LOG level info prefix `Class A address: '
    LOG 0 -- 172.16.0.0/12 anywhere limit: avg 1/min burst 1 LOG level info prefix `Class B address: '
    LOG 0 -- 192.168.0.0/16 anywhere limit: avg 1/min burst 1 LOG level info prefix `Class C address: '
    LOG 0 -- link-local/16 anywhere limit: avg 1/min burst 1 LOG level info prefix `Class M$ address: '
    DROP 0 -- 10.0.0.0/8 anywhere
    DROP 0 -- 172.16.0.0/12 anywhere
    DROP 0 -- 192.168.0.0/16 anywhere
    DROP 0 -- link-local/16 anywhere

    Chain SPOOF_CHK (2 references)
    target prot opt source destination
    RETURN 0 -- anywhere anywhere

    Chain VALID_CHK (2 references)
    target prot opt source destination
    LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG limit: avg 3/min burst 5 LOG level info prefix `Stealth XMAS scan: '
    LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG limit: avg 3/min burst 5 LOG level info prefix `Stealth XMAS-PSH scan: '
    LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG limit: avg 3/min burst 5 LOG level info prefix `Stealth XMAS-ALL scan: '
    LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN limit: avg 3/min burst 5 LOG level info prefix `Stealth FIN scan: '
    LOG tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST limit: avg 3/min burst 5 LOG level info prefix `Stealth SYN/RST scan: '
    LOG tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN limit: avg 3/min burst 5 LOG level info prefix `Stealth SYN/FIN scan(?): '
    LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE limit: avg 3/min burst 5 LOG level info prefix `Stealth Null scan: '
    DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
    DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
    DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
    DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN
    DROP tcp -- anywhere anywhere tcp flags:SYN,RST/SYN,RST
    DROP tcp -- anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
    DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
    LOG tcp -- anywhere anywhere tcp option=64 limit: avg 3/min burst 1 LOG level info prefix `Bad TCP flag(64): '
    LOG tcp -- anywhere anywhere tcp option=128 limit: avg 3/min burst 1 LOG level info prefix `Bad TCP flag(128): '
    DROP tcp -- anywhere anywhere tcp option=64
    DROP tcp -- anywhere anywhere tcp option=128
    DROP 0 -- anywhere anywhere state INVALID
    LOG 0 -f anywhere anywhere limit: avg 3/min burst 1 LOG level warning prefix `Fragmented packet: '
    DROP 0 -f anywhere anywhere

    Chain allow-www-traffic-in (0 references)
    target prot opt source destination
    ACCEPT tcp -- anywhere anywhere limit: avg 1/sec burst 5 tcp dpt:www flags:FIN,SYN,RST,PSH,ACK,URG/FIN
    ACCEPT tcp -- anywhere anywhere limit: avg 1/sec burst 5 tcp dpt:www flags:FIN,SYN,RST,PSH,ACK,URG/SYN
    ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED tcp dpt:webcache
     
    snewp, May 5, 2008
    #13
  14. falko

    falko Super Moderator Howtoforge Staff

    Ok, does the download speed change when you disable the firewall?
     
    falko, May 6, 2008
    #14
  15. snewp

    snewp New Member

    it didnt change. when it was a fresh install with no firewall, no security the speed is still the same (slow). so i think it's gotta be with my onboard NiC.

    I just finished the reinstall and use another NIC, the speed is ok now.

    thanks for your help falko. i appreciate it.
     
    snewp, May 9, 2008
    #15

Share This Page