search for: external_interfac

...------+ out | | +-------+ +--------+ | INPUT |---- Local process -| OUTPUT | +-------+ +--------+ iptables -t mangle -A INPUT -i $EXTERNAL_INTERFACE -p tcp -j MARK --set-mark 0x1 iptables -t mangle -A FORWARD -i $EXTERNAL_INTERFACE -p tcp -j MARK --set-mark 0x2 iptables -t mangle -A PREROUTING -i $EXTERNAL_INTERFACE -j IMQ /Basic _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl...

...ns 137/udp netbios-dgm 138/tcp # NETBIOS Datagram Service netbios-dgm 138/udp netbios-ssn 139/tcp # NETBIOS session service netbios-ssn 139/udp I'm using the IPCHAINS and I configured in this way: ipchains -A input -i $EXTERNAL_INTERFACE \ -s $ANYWHERE $NETBIOSPORTS -p tcp \ -d $IPADDR $NETBIOSPORTS -j ACCEPT ipchains -A output -i $EXTERNAL_INTERFACE \ -s $IPADDR $NETBIOSPORTS -p tcp \ -d $ANYWHERE $NETBIOSPORTS -j ACCEPT ipchains -A input -i $EXTERNAL_INTERFACE \ -s $ANYWHERE $NETBIOSPORTS -p udp \ -d $IPADDR $NETBIOSPORTS -j...

Hi, I want to be able to specify actions for different classes of traffic in any of these four ways, and I''d like to use only HTB if possible: 1. No guranteed rate, No ceil 2. Guaranteed rate, No ceil 3. No guranteed rate, Ceil specified 4. Guaranteed rate, Ceil specified For types 2, 3 and 4 there can be several classes of each, with different rates and ceilings. 4 is ofcourse easy.

...The wrong packets can be monitored by using tcpdump (see reproduction). Reproduction: >From my internal computer (${SOURCE}) I scanned an external computer ${VICTIM} (willingly), command is: nmap -sX ${VICTIM} On my router I had the command: tcpdump -v -i ${EXTERNAL_INTERFACE} src net ${SOURCENET} Rules in use: iptables -t nat -F iptables -t forward -F iptables -t nat -A POSTROUTING -o ${EXTERNAL_INTERFACE} -j SNAT --to-source ${EXTERNAL_IP} Forwarding was enabled _after_ installing the iptablesrules. I think that an unusal combination of flags causes that problem...

Hi guys, i have a problem with a configuration what i''m trying to do. I have two computers with linux, A and B, connected in the same network with this configuration: PC1 A: 192.168.192.1 PC2 B: 192.168.192.30 The PC1 A is a firewall doing nat... this one is connected to the internet via an adsl modem and of course it have its own public ip , and the router B is a smtp server but

What is the best way to temporarily setup a port relay. I'm trying to diagnose a problem with Cisco's latest VPN client and need to determine if the problem is port number related. e.g. VPN client---------23-(Linux box to relay port)-------xx-(Telnet server) (Keep in mind this is temporary and for debugging purposes) Thanks, Frank M. Ramaekers Jr. Systems Programmer

Hi guys, Can you take a look at this? :) +-----------+ | | eth1-|- | | -|-eth0---LAN--- | | eth2-|- | | | +-----------+ - eth0 is connected to the LAN having the IP=LAN_IP eth1 is connected to the first ISP having IP=ISP_IP_1 and GW=ISP_GW_1 eth2 is connected to the second ISP having IP=ISP_IP_2 and GW=ISP_GW_2 I need

Hello, I have finished setting up the load balancer with IPROUTE ... also patch the kernel to support DGD and now it''s working fine with the valuable guide at LARTC website, Julian Anastasov, and the kind people in this mailing list. Now I would like to launch a web server and a ftp server to the public but I''m stuck into a problem and really need your help. Currently internal