search for: ipt_iprange

...-s 10.10.60.55 -d 10.0.0.0/8 -p tcp --dport 161 -j ACCEPT 09:45 root at i-fw0 As google searches hinted at a missing module, I wrote a small shell wrapper around modprobe which just logs the parameters that modprobe is called with. This results in the following log: -q -- net-pf-16-proto-9 -q -- ipt_iprange -q -- net-pf-16-proto-9 net-pf-16 should be af_netlink, if my memory and Google foo don't fail me, but this module doesn't exist with my 2.6.32.29 kernel (config attached), but seems to be compiled in statically. But this means that the kernel shouldn't try to load it (in my understand...

...CC net/ipv4/netfilter/ip_tables.mod.o LD [M] net/ipv4/netfilter/ip_tables.ko CC net/ipv4/netfilter/ipt_MASQUERADE.mod.o LD [M] net/ipv4/netfilter/ipt_MASQUERADE.ko CC net/ipv4/netfilter/ipt_REJECT.mod.o LD [M] net/ipv4/netfilter/ipt_REJECT.ko CC net/ipv4/netfilter/ipt_iprange.mod.o LD [M] net/ipv4/netfilter/ipt_iprange.ko CC net/ipv4/netfilter/iptable_filter.mod.o LD [M] net/ipv4/netfilter/iptable_filter.ko CC net/ipv4/netfilter/iptable_nat.mod.o LD [M] net/ipv4/netfilter/iptable_nat.ko linux:/usr/src/xen/xen-2.0-testing/linux-2.6.11-xen0 # ------...

Hello all, It''s my first letter on this list, and, my English is not very well. Please take me indulgence for grammar/syntax and over erorrs :)) I have trouble for acl''s of ip range. But, acl for one host (with ip adress) work fine. Please help me for make work acl/find erorr in acl. Becouse I''m new shorewall user, I maked test configuration on Virtual Mashine

..._sip.o CC [M] net/ipv4/netfilter/ip_tables.o CC [M] net/ipv4/netfilter/iptable_filter.o CC [M] net/ipv4/netfilter/iptable_mangle.o LD [M] net/ipv4/netfilter/iptable_nat.o CC [M] net/ipv4/netfilter/iptable_raw.o CC [M] net/ipv4/netfilter/ipt_hashlimit.o CC [M] net/ipv4/netfilter/ipt_iprange.o CC [M] net/ipv4/netfilter/ipt_owner.o CC [M] net/ipv4/netfilter/ipt_tos.o CC [M] net/ipv4/netfilter/ipt_recent.o CC [M] net/ipv4/netfilter/ipt_ecn.o /opt/linux-2.6.18-xen.hg/net/ipv4/netfilter/ipt_ecn.c: In function ‘match_ip’: /opt/linux-2.6.18-xen.hg/net/ipv4/netfilter/ipt_ecn.c:26...

We have a (supposedly) quite standard setup: 2 Dom0 with drbd-on-lvm and a bunch of DomU, on Quad Xeon Dell servers. We tried with both sid-based and etch-based (+ 3.1 xen hypervisor and drbd 8 from backports.org ) Dom0, and quite consistently have "kernel: invalid opcode: 0000 [1] SMP" errors which freezes Dom0 (during lasts tests a simple start-and-stop loop of 10 DomU can trigger

...as loaded okay as far as I can tell: root@gecko:~# lsmod | grep p2p ipt_ipp2p 8256 0 x_tables 15236 43 xt_comment,xt_policy,xt_multiport,ipt_ULOG,ipt_TTL,ipt_ttl,ipt_TOS,ipt_tos,ipt_SAME,ipt_REJECT,ipt_REDIRECT,ipt_recent,ipt_owner,ipt_NETMAP,ipt_MASQUERADE,ipt_LOG,ipt_iprange,ipt_ipp2p,ipt_ECN,ipt_ecn,ipt_ah,ipt_addrtype,xt_tcpmss,xt_pkttype,xt_physdev,xt_NFQUEUE,xt_NFLOG,xt_MARK,xt_mark,xt_mac,xt_limit,xt_length,xt_helper,xt_hashlimit,xt_dccp,xt_conntrack,xt_CONNMARK,xt_connmark,xt_CLASSIFY,xt_tcpudp,xt_state,iptable_nat,ip_tables And the help for it works okay: roo...

...ipt_limit.ko ipt_owner.ko ipt_tcpmss.ko iptable_mangle.ko ip_conntrack_irc.ko ip_nat_tftp.ko ipt_REDIRECT.ko ipt_conntrack.ko ipt_helper.ko ipt_mac.ko ipt_pkttype.ko ipt_tos.ko iptable_nat.ko ip_conntrack_tftp.ko ip_tables.ko ipt_REJECT.ko ipt_dscp.ko ipt_iprange.ko ipt_mark.ko ipt_recent.ko ipt_ttl.ko Should one of these modules be loaded to solve the problem?

I''m very new to shorewall. My setup is IP Gateway (CentOS 4 + Shorewall) with 3 NIC cards. Shorewall works great on the firewall machine. Bind also works (local net machines get IPs fine). Under firestarter, all works great. With shorewall, the loc machines can not route past the firewall. They can connect to the firewall, but not past it. Exactly what information should I post to get

...y snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss snd_intel8x0 snd_ac97_codec snd_pcm snd_timer snd_page_alloc snd soundcore lp parport_pc ppdev parport ipt_REJECT ipt_LOG ipt_state ipt_pkttype ipt_set ipt_CONNMARK ipt_MARK ipt_ROUTE ipt_connmark ipt_owner ipt_recent ipt_iprange ipt_physdev ipt_multiport ipt_conntrack iptable_mangle ip_set_portmap ip_set_macipmap ip_set_ipmap ip_set_iphash ip_set ip_nat_irc ip_nat_tftp ip_nat_ftp iptable_nat ip_conntrack_irc ip_conntrack_tftp ip_conntrack_ftp ip_conntrack iptable_filter ip_tables 8139too mii af_packet ide_cd loop ext3 jbd...

...ult via 62.58.222.90 dev ppp0 Table default: ARP ? (192.168.1.105) at 00:0C:6E:D7:65:D1 [ether] on eth0 ? (10.0.0.138) at 00:90:D0:39:56:A7 [ether] on eth1 Modules ipt_MASQUERADE 3968 1 ipt_REJECT 6528 4 ipt_LOG 6272 10 ipt_TCPMSS 4480 1 ipt_state 2304 16 ipt_pkttype 2048 4 ipt_recent 10252 0 ipt_iprange 2048 0 ipt_physdev 2320 0 ipt_multiport 2304 2 ipt_conntrack 2816 0 ip_nat_irc 4464 0 ip_nat_tftp 3696 0 ip_nat_ftp 4976 0 ip_conntrack_irc 71600 1 ip_nat_irc ip_conntrack_tftp 3888 0 ip_conntrack_ftp 72240 1 ip_nat_ftp ip_conntrack 32520 10 ipt_MASQUERADE,ipt_state,ipt_conntrack,ip_nat_irc,ip_nat_...

...gt; > ARP > > ? (9.132.182.1) at 00:00:0C:07:AC:00 [ether] on eth0 > > Modules > > ipt_REJECT 6912 4 > ipt_LOG 7232 10 > ipt_state 1920 17 > ipt_pkttype 1664 4 > ipt_recent 11276 0 > ipt_iprange 1792 0 > ipt_multiport 2496 0 > ipt_conntrack 2560 4 > ip_nat_irc 2432 0 > ip_nat_ftp 3136 0 > ip_conntrack_irc 72080 1 ip_nat_irc > ip_conntrack_ftp 73040 1 ip_nat_ftp > ip_conntrack 45...

...4256 4 ipt_LOG 6272 13 ipt_state 1312 13 ipt_pkttype 1184 4 ipt_CONNMARK 1696 0 ipt_MARK 1984 0 ipt_ROUTE 4260 0 ipt_connmark 1216 0 ipt_owner 2432 0 ipt_recent 9292 0 ipt_iprange 1312 0 ipt_physdev 1744 0 ipt_multiport 2112 0 ipt_conntrack 1792 0 ip_set_portmap 3840 0 ip_set_macipmap 3780 0 ip_set_ipmap 3872 0 ip_set_iphash 5924 0 ip_set 18876 8 ip_set_portmap,ip_set_...

Hi folks, Has anyone tested the changes to multiple ISPs/load balancing or routestopped in 2.4.0-RC1 yet? We need to talk about what criteria we will use for determining whether 2.4.0 is ready for release. I''ve started configuring a firewall at work with the multiple ISPs support, but its kernel doesn''t have connection marking support, so it''s going to be a couple of

Hi, I recently subscribed to xen-users asking about a powernow-k8 problem, but in the meantime I am not sure if the users-list was the right place for it. So I decided to repeat my question here ;-) My current config is attached. --- snip --- Hi, I recently installed Xen on my AMD64 for my first time and so far, everything seems to work pretty fine. :-) I tried to enable cpu frequency

...Modules ipt_mac 2048 1 ipt_tcpmss 2368 0 ipt_MASQUERADE 4032 1 ipt_REJECT 7104 4 ipt_LOG 6656 8 ipt_TCPMSS 4480 0 ipt_state 2112 19 ipt_pkttype 1792 4 ipt_recent 11148 0 ipt_iprange 1856 0 ipt_physdev 2192 14 ipt_multiport 2112 2 ipt_conntrack 2688 0 ip_nat_irc 4400 0 ip_nat_tftp 3504 0 ip_nat_ftp 5104 0 ip_conntrack_irc 71472 1 ip_nat_irc ip_conntrack_tftp 3760 0 ip_conntrac...

Hello, You will find in attachment the layout of my current physical configuration. For now, the Cable ISP is not used. Since it is a dynamic ISP, my mailserver is rejected and my domain name registers on blacklists like ORDB and al. I want it to be used as a default gateway except for my mail server that would be seen as coming from my "honest" ADSL ISP. Here is

I''m tracking performance on the machine I installed yesterday. mutt running on one Xen instance, accessing via imap to another instance, accessing via nfs the maildir in another instances, seems little laggy when moving up and down the message index list. Network latency seems low < 30ms on average. So I was tracking vmstat. On the mutt instances is seems reasonable: [nic@shell:~]

...6 21:11:55 localhost CPU 0 Aug 6 21:11:55 localhost Modules linked in: nouveau drm sch_sfq cls_fw sch_htb ip6table_filter iptable_raw xt_comment xt_policy xt_multiport ipt_ULOG ipt_TTL ipt_ttl ipt_TOS ipt_tos ipt_SAME ipt_REJECT ipt_REDIRECT ipt_recent ipt_owner ipt_NETMAP ipt_MASQUERADE ipt_LOG ipt_iprange ipt_ECN ipt_ecn ipt_CLUSTERIP ipt_ah ipt_addrtype nf_nat_tftp nf_nat_snmp_basic nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda ts_kmp nf_conntrack_amanda nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_sctp nf_conntrack_pptp nf_conntrack_proto_gre nf_c...

...ip_tables ++ local modulefile ++ local suffix ++ moduleloader=modprobe ++ qt which modprobe ++ which modprobe +++ lsmod +++ grep ip_tables ++ ''['' -z ''ip_tables 23936 19 ipt_ROUTE,ipt_MASQUERADE,ipt_MARK,ipt_mark,ipt_CONNMARK,ipt_connmark,ipt_owner,ipt_recent,ipt_iprange,ipt_physdev,ipt_multiport,ipt_REJECT,ipt_conntrack,ipt_pkttype,ipt_LOG,ipt_state,iptable_mangle,iptable_nat,iptable_filter'' '']'' ++ loadmodule iptable_filter ++ local modulename=iptable_filter ++ local modulefile ++ local suffix ++ moduleloader=modprobe ++ qt which modprob...