search for: int_if

...d then after 1 or 2 seconds jumps to 144kbps, its bad :-( and it is often. Root class is 20Mbit There are about 7000 classes (on two interfaces) an example script: =============================================================================================== #!/bin/sh TC="/sbin/tc" INT_IF="eth1" EXT_IF="eth0" $TC qdisc del dev $INT_IF root $TC qdisc del dev $EXT_IF root $TC qdisc add dev $INT_IF root handle 1: htb r2q 1 default 2000 # tried default r2q $TC qdisc add dev $EXT_IF root handle 1: htb r2q 1 default 2000 $TC class add dev $INT_IF parent 1: classid 1:...

...s script as it is not working and I can''t figure out what that is. Anyone can help? Thanks! #!/bin/bash ### unitati de masura pt debit # kbps - kilobytes per second # mbps - megabytes per second # kbit - kilbits per second # mbit - megabits per second EXT_IF="eth0" INT_IF="eth1" TC=/sbin/tc IPTABLES=/sbin/iptables # RATE DOWNLOAD RAD_INET_ALL="1736kbit" RAD_INET_LOW="64kbit" RAD_INET_HIGH="256kbit" RAD_METRO_ALL="90mbit" RAD_METRO_LOW="70mbit" RAD_METRO_HIGH="80mbit" # RATE UPLOAD RUP_...

...l traffic in 256 KBps classes and for metropolitan traffic 100 MB or approximatively. Thank you! #!/bin/bash ### unitati de masura pt debit # kbps - kilobytes per second # mbps - megabytes per second # kbit - kilbits per second # mbit - megabits per second EXT_IF="eth0" INT_IF="eth1" TC=/sbin/tc IPTABLES=/sbin/iptables # RATE DOWNLOAD RAD_INET_ALL="1736kbit" RAD_INET_LOW="64kbit" RAD_INET_HIGH="256kbit" RAD_METRO_ALL="90mbit" RAD_METRO_LOW="70mbit" RAD_METRO_HIGH="80mbit" # RATE UPLOA...

Hi, I was reading document http://shorewall.net/MultiISP.html#idp3634200. Inspired by the document I was trying to establish the following changes: * one additional interface: COMA_IF * COM[A,B,C]_IF interfaces request IP address via DHCP * all non-RFC 1918 destined trafic is NATed from INT_IF to COMA_IF * all non-RFC 1918 destined trafic from GW is routed via COMB_IF by default * non-RFC 1918 destined trafic from GW is possible to route via COMA_IF or COMC_IF if necessary Content of provider file: ComcastA 1 0x10000 - COMA_IF detect loose,fallback Co...

Hi All, I have an asterisk box on my DMZ, and I'm using a PF for my firewall, I can make a call but some reasons I have a dead air. Any Ideas? below are my rules... ext_if = "bce0" int_if = "bce1" altitude = "172.16.1.0/24" #### machines #### vbox = "172.16.1.1" uci = "172.16.1.4" voices = "203.172.x.1" ipc = "203.172.x.2" #### default deny #### set block-policy return set loginterface $ext_if set skip on lo scrub in ###...

Has anybody on this managed to get ChilliSpot and Shorewall to work together? I have managed to get it to work with the supplied firewall script but if I wanted to do my firewall like that I would not be using Shorewall. At any rate, I am having all kinds of trouble translating the supplied rules to something that Shorewall would understand. If anybody has already done it I would love to see the

I'm trying to use pf + ftp-proxy n a 6.1-PRERELEASE machine. I have this line on inetd.conf: ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy -n And this lines on pf.conf: rdr on $int_if proto tcp from any to any port ftp -> 127.0.0.1 port ftp-proxy pass in quick on $ext_if inet proto tcp from any port ftp-data to $ext_if:0 user proxy flags S/SA keep state When one machine inside my network (e.g. 192.168.x.x) connects to an external ftp server (e.g. ftp.FreeBSD.org), data conne...

...XA_NET=`ip addr ls $EXA_IF | awk ''/inet/ { print $2 }'' | head -1` EXA_IP=${EXA_NET//\/*/} EXA_GW=A.B.C.225 EXA_RNG=A.B.C.230 EXB_IF=eth2 EXB_NET=`ip addr ls $EXB_IF | awk ''/inet/ { print $2 }'' | head -1` EXB_IP=${EXB_NET//\/*/} EXB_GW=J.K.L.97 EXB_RNG=J.K.L.102 INT_IF=eth1 INT_NET=`ip addr ls $INT_IF | awk ''/inet/ { print $2 }'' | head -1` INT_IP=${INT_NET//\/*/} ip rule add prio 50 table main ip route del default table main 2>/dev/null ip rule add priority 100 from $EXB_NET table EXB ip route add default via $EXB_GW dev $EXB_IF src $EXB_IP...

I try use setup traffic shaping with Shorewall-4.0.2 and have fault. When i start Shorewall with tc-files configured i get follow messages: ... RTNETLINK answers: No such file or directory We have an error talking to the kernel ERROR: Command "tc filter add dev eth2 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 500kbit burst 10k drop flowid :1" Failed

...horewall.net/Shorewall_Squid_Usage.html, I now use this single entry in /etc/shorewall/routes to route all HTTP requests from the internal network to 206.124.146.177 in the DMZ: #SOURCE DEST PROTO PORT(S) SOURCE INTERFACE GATEWAY # PORT(S) $INT_IF 0.0.0.0/0 tcp 80 - $DMZ_IF 206.124.146.177 Happy routing, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp...