search for: clasifi

...t 80 -j MARK --set-mark 2 iptables -t mangle -A PREROUTING -i eth1 -p tcp --dport 20 -j MARK --set-mark 3 iptables -t mangle -A PREROUTING -i eth1 -p tcp --dport 21 -j MARK --set-mark 3 ##################### The traffic it continues goes out by the "default" qdisc (1:30), and it was not clasified by the correct qdisc. I did try a ftp transfererence using the 20 and 21 TCP ports, this should to use the 1:20 qdisc asociated with the "handle 3"...BUT DID NOT WORK...!!! PLease, help me...!!! -- terraja-based _______________________________________________ LARTC mailing list LAR...

...e -A PREROUTING -i eth1 -p tcp --dport 20 -j MARK > --set-mark 3 > iptables -t mangle -A PREROUTING -i eth1 -p tcp --dport 21 -j MARK > --set-mark 3 > ##################### > > > The traffic it continues goes out by the "default" qdisc (1:30), and it > was > not clasified by the correct qdisc. > I did try a ftp transfererence using the 20 and 21 TCP ports, this should > to > use the 1:20 qdisc asociated with the "handle 3"...BUT DID NOT WORK...!!! > PLease, help me...!!! > > > -- > terraja-based > -------------- next part -----...

...a mistake in the http://www.shorewall.net/ipp2p.html documentation. I''ve been trying to get traffic shaping working on the p2p traffic (Using ipp2p and wonder shaper) and lossing clumps of hair in the process. I followed the web page documentation but the "tcpost" rule that clasifies the packet and actually starts the "castration" process never matached any packets.... Until! I added a ":C" to the final two lines on that page (although it''s only one line in my config). I maybe wrong, but this seems correct as the filter is now matching packets...

...m having trouble with a new setup. My server is running postfix (2.5.5), dovecot (1.1.7), dspam (3.8.0). These all seems to work with eachother. When I add dovecot-antispam in the mix, the following problem occurs: New mail arrives, postfix hands the mail to dspam using a content_filter, and dspam clasifies the mail, running as the dspam user. Dspam writes its data away in a sqlite database. Mail then gets reinjected into postfix and delivered to the system user by deliver. When I manually classify a mail using dovecot-antispam, dovecot runs dspam classification as the system user. This gives the e...

...add dev imq0 parent 1:1 prio 1 protocol ip handle 3 fw flowid 1:20 ############################################ Ya luego, con el segundo script deberia agregar al final las MARKs de IPTABLES, pero no lo hice porque ni siquera cuando hago un SHOW de las qdisc (tc qdisc show) me muestra el trafico clasificado, es decir...luego yo iba a mandar el trafico de la class 1:10 para el protocolo HTTP y la 1:20 para FTP, y eso se hace justamente con IPTABLES, pero repito no lo hice porque no veo el trafico desglozado previamente cuando trafico, usando los 2 potocolos, en la qdisc. Esa es la cuestion, no logr...

>Alen, > > : can i add HTB rule on virtual interface? > : example: eth0:0 > >First, it''s not really a virtual interface--it''s just a convention from the old days of IP aliasing to have names like eth0:0. > The IP exists and is active on an interface, eth0 in your case. > The short answer is "no". Traffic control occurs just prior to the

https://bugzilla.netfilter.org/show_bug.cgi?id=909 Summary: nat destroy packet mark Product: netfilter/iptables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: blocker Priority: P5 Component: NAT AssignedTo: netfilter-buglog at lists.netfilter.org

...ave lots of ''flows'' and can thus take up a larger share of the bandwidth than a system having only a single active connection. The ''flow'' classifier (module cls_flow) works around this by letting you define what a ''flow'' is. The clasifier must be used carefully or it can block off all traffic on an interface! To use the ''flow'' classifier, you specify ''flow=<keys>'' in the OPTIONS column of an HTB leaf class (one that has no sub-classes). I recommend that you use the followi...

Hi Roy, It seems that I wasn''t clear. Lets give an example. I have a machine with a single ethernet interface, with two IP addresses A and B. This is done using two virtual interfaces. A is my IP address in ISP-A. B is my IP address in ISP-B. The physical line to ISP-A is 1.5Mbps. The physical line to ISP-B is 256kbps. I want to shape the traffic so that, for example, HTTP traffic

Hello list, I discover strange behaviour of shaping traffic that i setup from Shorewall-4.0.2. I know that this is not Shorewall problem but may be somebody from list can help me or explain this situation. I have follow interfaces in 'tcdevices' files: #INTERFACE IN-BANDWITH OUT-BANDWIDTH # $EXT_IF 500kbit 248kbit $INT1_IF 500mbit

...ers (one-against-one-method) and then uses a voting mechanism to determine the actual class. Now, this means k(k-1)/2 classifiers, hence in principle k(k-1)/2 sets of SV's, coefficiants and rhos. These are stored in a compressed format: 1) Only one SV is stored in case it were used by several clasifiers. The model$SV-matrix is ordered by classes, and you find the starting indices by using nSV (number of SV's): start <- c(1, cumsum(model$nSV)) start <- start[-length(start)] sum(nSV) equals the total nr. of (distinct) SVs. 2) The coefficients of the SV's are stored in the model$c...