Luis Miguel Cruz Miranda
2002-Nov-25 16:08 UTC
init scripts to use and save iproute and tc rules
Where can I find any init scripts to use and save iproute and tc rules? Luis Miguel Cruz Miranda. CCNA - Systems Administrator _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
On Monday 25 November 2002 17:08, Luis Miguel Cruz Miranda wrote:> Where can I find any init scripts to use and save iproute and tc rules?There is no such script. Stef -- stef.coene@docum.org "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Hi folks, I would like to use the IMQ device and what I have to apply (patches) for the kernel 2.4.19 and iptables 1.2.7a? Thank you Rimas _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
I personally put before the touch''ing of lock files in /etc.rc.d/init.d/network in the "start" section, and their deletion in the same under the "stop" case also before the removal of the lock file On Mon, 2002-11-25 at 14:08, Luis Miguel Cruz Miranda wrote:> Where can I find any init scripts to use and save iproute and tc rules? > > > Luis Miguel Cruz Miranda. > CCNA - Systems Administrator > > _______________________________________________ > LARTC mailing list / LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/_______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
On Tuesday 26 November 2002 11:02, Rimas wrote:> Hi folks, > > I would like to use the IMQ device and what I have to apply (patches) for > the kernel 2.4.19 and iptables 1.2.7a?See the IMQ pages : http://trash.net/~kaber/imq Stef -- stef.coene@docum.org "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
|Where can I find any init scripts to use and save iproute and tc rules? ]- here is one for tcng for mandrake, u can easly change it for tc (just edit start() ) to suit your needs #!/bin/sh # # tcng: Starts the tcng Server # # Version: @(#) /etc/rc.d/init.d/tcng 0.1 # # chkconfig: 2345 90 10 # description: Starts and stops the tcng at boot time and shutdown. # # processname: tcng # # created : from Raptor # #path to the tc command tc=/sbin/tc #path to the tcc command tcc=/arh/bin/com.pl #where is the tcng config file tcngConf=/path/tcng/blah.tcng offMsg=OFF onMsg=ON debug=1 # Source function library. . /etc/rc.d/init.d/functions isUp () { res=`$tc qdisc show dev $1` if [ -z "$res" ]; then return 1; fi return 0 } start () { gprintf "Starting tcng services: "; echo OLDIFS="$IFS" IFS=" " cmds=`$tcc $tcngConf | grep -v "^#" | sed -e "s/^tc//"` for cmd in $cmds; do [ $debug -eq 1 ] && gprintf "Execute : $cmd:" && echo; eval "$tc $cmd" done touch /var/lock/subsys/tcng IFS="$OLDIFS" } stop () { gprintf "Stopping some/all tcng services: " echo #if explictly specified shut only these devices [ "$1" ] && devs=$*; # echo $devs for d in $devs; do if isUp $d ; then gprintf "Flushing : $d"; echo $tc qdisc del dev $d root else gprintf "No traffic control running on : $d"; echo fi # rm -f /var/lock/subsys/tcng-$d done rm -f /var/lock/subsys/tcng;#this is not the correct behavior } status () { [ "$1" ] && devs=$*; # echo $devs for d in $devs; do if isUp $d ; then gprintf "traffic control on $d : [$onMsg]"; echo; else gprintf "traffic control on $d: [$offMsg]"; echo; fi done } show () { if [ -z "$1" ]; then what=all; else what=$1; fi shift if [ "$1" ]; then devs=$*; fi for d in $devs; do if isUp $d; then [ "$what" = "all" ] || [ "$what" = "qdisc" ] && gprintf "`$tc qdisc show dev $d`"; echo [ "$what" = "all" ] || [ "$what" = "class" ] && gprintf "`$tc class show dev $d`"; echo [ "$what" = "all" ] || [ "$what" = "filter" ] && gprintf "`$tc filter show dev $d`"; echo fi done } parse () { echo "$1" | perl -ne '' $_ =~ s/(\d+?:\d+?)/$1/gs; print $_ '' } stat () { [ -z "$1" ] || [ -z "$2" ] && gprintf "qdisc|class or device has to be specified !!!" && echo && exit; parse "`$tc -s $1 show dev $2`" } devs=`ifconfig -a | grep ''^\w'' | grep -v lo | cut -f 1 -d '' ''` command=$1 shift; case "$command" in start) start ;; stop) stop $@ ;; status) status $@ ;; show) show $@ ;; stat) stat $@ ;; restart) gprintf "Restarting tcng. "; echo stop $@ start $@ ;; *) gprintf "*** Usage: tcng {start|stop|status|restart} [devices] tcng show [all|qdisc|class|filter] [devices] tcng stat [qdisc|class] [devices] "; echo exit 1 esac exit 0 _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
Dear Guru I do not know if here is the most apropriated place to send this. If it is not please send me some good directions. I am trying to configure a FTP server behind two consecutives packet filters: Internet <---> Filter 1 <--> Filter 2 <--> FTP SERVER At Filter 1 I have: INET_IFACE=eth1 $IPTABLES -t nat -A PREROUTING -i $INET_IFACE -p TCP -d $STATIC_IP \ --dport 21 -j DNAT --to-destination 192.168.20.2 $IPTABLES -t nat -A PREROUTING -i $INET_IFACE -p TCP -d $STATIC_IP \ --dport 20 -j DNAT --to-destination 192.168.20.2 When I launch ftp at the client I can see the following output thru inner ethernet card (Filter 1 <--> Filter 2): # tcpdump -e -p -n -i eth0 host 200.231.48.43 User level filter, protocol ALL, datagram packet socket tcpdump: listening on eth0 11:50:39.261845 0:0:0:0:0:0 0:6:5b:28:62:b2 ip 74: 200.231.48.43.1291 > 192.168.20.2.ftp: S 1376590181:1376590181(0) win 5840 <mss 1460,nop,nop,timestamp 31629423 0,nop,wscale 0> (DF) 180 packets received by filter # arp -an ? (200.231.48.97) at 00:60:1D:03:7F:41 [ether] on eth1 ? (192.168.30.2) at 00:50:DA:27:5B:41 [ether] on eth0 # route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.30.0 0.0.0.0 255.255.255.252 U 0 0 0 eth0 192.168.20.0 192.168.30.2 255.255.255.0 UG 0 0 0 eth0 0.0.0.0 200.231.48.97 0.0.0.0 UG 0 0 0 eth1 As one can also see, the destination IP address was correctly changed but the destination ethernet address is 0:0:0:0:0:0 !! I can''t see this packet going out from Filter 2 to FTP server. Shoudn''t this frame have the destination ethernet address 00:50:DA:27:5B:41 which is the gateway for network 192.168.20.0?? What am I missing? # uname -a Linux gateway 2.4.10 #1 Wed Sep 26 17:52:16 BRT 2001 i686 unknown Ethy H. Brito /"\ InterNexo Ltda. \ / CAMPANHA DA FITA ASCII - CONTRA MAIL HTML +55 (12) 3941-6860 X ASCII RIBBON CAMPAIGN - AGAINST HTML MAIL S.J.Campos - Brasil / \ _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/