# Troubleshooting

a para

## Reading log output

Is it logged?

Not logged means matched a rule

## Reading iptables

content

## Performance

content

### Generation v.s. running

content

### Optimisation

v.s. auditing

1 chain per command

no automated optimisation pass or avoidance of jumps

manual optimisation wuth groups

### Rules are created in order

put more heavily used interfaces nearer top

put more heavily used services nearer top of interfaces

### Startup speed

Processing phase - no changes in place yet

Activation phase - limited firewall. Can take a few seconds. iptables-restore http://bugs.sanewall.org/sanewall/issues/11 You can help!