search for: andybev

Hello list. I''ve configured a very simple script to slow down packets coming from a particular IP Address. I''ve used IPTABLES to mark traffic coming from this IP Address, but it does not appear to be working as expected. Let me first describe my system as maybe what I''m doing is beyond what NETFILTER can do. I have one machine that runs all my servers as

On Fri, 2015-06-26 at 09:40 -0600, Shawn Heisey wrote: > On 6/26/2015 5:48 AM, Andrew Beverley wrote: > > I'm configuring some Sieve scripts for virtual users. I'd like to keep > > the Sieve scripts somewhere "sensible". > > > > Currently, all the mail goes into /var/mail/vhosts/<domain>/<mailbox> > > > > So I thought a good

# iptables -t mangle -A POSTROUTING -m mark --mark ! 0 -j ACCEPT iptables v1.3.3: Bad MARK value `!'' I''m puzzled, what''s wrong with this syntax? kernel is 2.6.15.7-ubuntu1 Thanks Francesco

Hi all, Since the mail list receives a lot of repeated subjects (for example: "i have two adsl lines..."), maybe these specific issues should be treated on the LARTC Guide, or maybe if we had an wiki? Is there a LARTC Wiki? If not, what do you think about creating one? Thanks -- Marco _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl

On June 26, 2015 7:10:29 PM Andrew Beverley <andy at andybev.com> wrote: > > in the "plugin" section: > > sieve=/home/vmail/sieve/%d/%u/.dovecot.sieve > > sieve_dir=/home/vmail/sieve/%d/%u/sieve change last sieve to .sieve so it does not colledge with other dirs atleast to remember if maildir does not start with a dot, i...

Excuse me for off topic Can you address me to how can I make some kind of captive portal with shorewall for internet cafe (I just need users first agree with terms of use and after they are gained full internet access). Up to now I use this script http://www.andybev.com/index.php/Using_iptables_and_PHP_to_create_a_captive_portalbut I''d like to switch or tie this with shorewall cause it''s more convenient Googling doesn''t help (found only one poor documented ITALIAN product here: http://www.openit.it/index.php?option=com_content&v...

Hi, I''m trying to divide my bandwidth between different services, but I''d like to take into account the number of active users. For example, l want divide my bandwidth between HTTP and SMTP and guarantee HTTP 80% of the bandwidth. However, I have many users on my system (tens of thousands) and if only 1% of my active users are using HTTP (and the other 99% SMTP), I''d

Sir, I have one 2 MB link which I have to distribute to 200 people. Caching may enchance performance. Kindly suggest packages for this purpose under GPL. Regards, Rayudu. _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Hi I believe that whole question is in topic. Is there any way to recognize ( and then shape ) p2p traffic which is encrypted? Modern p2p clients have this ability moreover some of them have this enabled by default. Now I''m using ipp2p for iptables but as I know this doesn''t recognize encrypted traffic. Thanks in advance. Pozdrawiam Szymon Turkiewicz

After varying degrees of success with p2p detection modules, I would like to write the following rules using iptables to reliably identify p2p traffic: 1. If a host on the network has 5 or more simutaneous tcp connections to ports above 1024, mark all connections to ports 1024 and above as 60. 2. If a host has received (or sent) UDP packets from 5 different hosts'' ports above 1024 in a

I'm configuring some Sieve scripts for virtual users. I'd like to keep the Sieve scripts somewhere "sensible". Currently, all the mail goes into /var/mail/vhosts/<domain>/<mailbox> So I thought a good place for the sieve script might be in there as well, for example: /var/mail/vhosts/example.com/username/sieve Is there any reason *not* to store the sieve scripts

Hi, Does anyone know of a traffic monitoring program that will display a connection''s MARK value as well as the normal information such as current rate? I use iptraf and ntop at the moment but neither seem capable of diplaying a connection''s MARK value. Thanks, Andy

To give fast web browsing on my network, I prioritise http traffic by marking it all into a high priority band (''30''). This generally works quite well, as unidentified traffic such as p2p falls by default into a lower priority band (''40''). However, I would like to de-prioritise anyone doing large downloads over http, which currently get high priority. Is there

Whenever I add or remove a DNAT rule such as: iptables -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination 192.168.0.1 there is sometimes a delay before the correct nat''ing is done. Can anyone tell me why this is? Is it something to do with caching of routing tables? If so, is there a way to clear them to ensure that the rule takes effect immediately? I am building a simple

Dear all, I would like to perform an action for certain users each time a mail arrives via LMTP. I would like to send an email notification to an external email address when new mail has arrived for certain users (note: not a forward). I am assuming that creating my own plugin using the existing "notify" plugin is the way to go. However, before I go down that route, I'd like to

Dear all, Is it possible to perform dict lookups with a SQL backend, without specifying the username_field in the SQL query? I am using the dict to retrieve a Sieve script. My dict configuration looks like this: map { pattern = priv/sieve/data/$id table = sieve_scripts username_field = email value_field = data fields { id = $id } } I don't want to specify the username

On Mon, 2015-08-17 at 15:23 +0200, Stephan Bosch wrote: > Still looks like the executed extdata plugin was compiled against a > different pigeonhole. Got it. There was an old version in /usr/lib/dovecot/modules/sieve/, whereas the new one was installed into /usr/local/lib/dovecot/sieve/. That all works now, and no segfault. Thanks for all your help and patience. Unfortunately my vacation

On Mon, 2015-08-17 at 17:37 +0200, Stephan Bosch wrote: > > Unfortunately my vacation rule no longer works though. I'm getting "sieve: > > user's script dict:proxy::sieve;name=active doesn't exist (trying default > > script location instead)" > [...] > > I guess I'm doing something stupid. Any ideas? > > Could you enable mail_debug and

On Thu, 2015-08-06 at 09:12 +0200, Stephan Bosch wrote: > Could you provide a full backtrace using the gdb command `bt full'? Thanks for the reply. Is this everything you need? #0 0x00007f8553969626 in sieve_validator_register_command () from /usr/lib/dovecot/libdovecot-sieve.so.0 No symbol table info available. #1 0x00007f8552eff4e6 in ext_extdata_validator_load (ext=0x7f8556f60280,

Hi, I've just upgrade from Debian Wheezy to Debian Jessie and am getting: Fatal: master: service(lmtp): child 6761 killed with signal 11 (core dumped) It seems to be something to do with sieve. When I disable that from lmtp then everything works fine. OS: Debian Jessie Dovecot version: 2.2.13 CPU: x86 This is the gdb output: Using host libthread_db library