search for: ethxx

Hello all, I got some severe iscsi connection loss on my dom0 (Gentoo 2.6.20-xen-r6, xen 3.1.1). Happening several times a day. open-iscsi version is 2.0.865.12. Target iscsi is the open-e DSS product. Here is a snip of my messages log file: May 5 16:52:50 ying connection226:0: iscsi: detected conn error (1011) May 5 16:52:51 ying iscsid: connect failed (111) May 5 16:52:51 ying iscsid:

...tunnel file has following in it: #TYPE ZONE GATEWAY GATEWAY ipsec INT Firewall_IP On Shorewall and DI804 side is private C class subnets. All real IP addresses and other security sensitive informations are replaced with descriptions (Internet_Interface instead of ethxx, Firewall_IP instead of public fixed IP on external firewall interface etc.). Any hope for that tunnel to be established? Does shorewall support FQDN in hosts file? Does it resolve it dinamically every time tunnel is to be established? Thanks, regards Ivica ------------------------------------...

...o all MAC addresses used in verification must belong to devices physically connected to one of the LANs to which your firewall is connected", but still I get info about MAC addresses on Internet adapter as well in syslog, for example: Apr 15 14:20:11 FIREWALL kernel: Shorewall:int2all:DROP:IN=ethXX OUT= MAC=00:04:75:a0:5e:f2:00:0d:ed:8a:ca:80:08:00 SRC=68.88.14.151 DST=my.internet.fixed.ip LEN=48 TOS=0x00 PREC=0x00 TTL=107 ID=21260 DF PROTO=TCP SPT=3794 DPT=17300 WINDOW=16384 RES=0x00 SYN URGP=0 MAC info is logged for some rule viloations, not all. Is it up to ISP? IPSEC unfortunatelly canno...

...s setup and now users still have their proper bandwidth from the Internet. Here is the graph representing the traffic: http://tuxpowered.net/lan_p2p/lan_eth1_rx_dzien.png the colors are: #ff00ff - htb 1:6666 (LAN p2p) #00ff00 - htb 1:6667 (Internet) #000000 - real interface traffic (tc -s li show ethXX) And now description of the problem: Class 1:6666 never has more traffic than ''rate''. AFAIK it should be having ''rate'' as minimum guaranted rate and going up to ''ceil'' if there is free bandwidth. (directing LAN traffic to 1:1 works OK - look...