search for: interdart

Apologies if this is not relevant to this list. I am seeing errors when loading a large iptables file Using iptables-restore containing more than out 1000 rules reports errors shown below in the system log: I am using Centos5 and have tried various processors and memory from Celeron 2.4 to Core2Duo and 500Mb to 2Gb The problem appears to be related to the size of the ruleset being loaded -

Hi, I am trying to get information on out-of-sequence packets being dropped on my load balanced multilink router. Can anyone give me any information on how best to log/track such packets? The router is based on Leaf Bering uClib 2.4 (kernel 2.4.26) The load balancing is being done using teql over a number of gre tunnels, each on a separate ethernet ADSL to a central box where the gre

I have a firewall (No NAT - just routing) configuration with a large number of chains and rules. I am now testing it on RH9 and it seems to take 100% user CPU time for more than 30 minutes for the script to run (I am still waiting for it to finish) On RH7.1 a similar set of rules takes about 30 seconds to load (also at around 100% cpu) Is this a known "feature" or am I missing

I have a block of IP addresses (2048) used for ADSL connections to customers. In order to provide a fair slice of available bandwidth on the contended services I would like to be able to set up some kind of SFQ filter, but using a hash of the destination IP address rather than the the full source and destination ip and port. This would be done at the Internet side gateway for traffic being