search for: lucassen

Is it possible to create 1 filter rule using fw selectors AND u32 selectors? Richard. -- ___________________________________________________________________ Recursion: see recursion +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+ __________________________________________...

...lways resulting in a "illegal match". R. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

...that for htb its maximum is 7. Is that right? R. -- ___________________________________________________________________ It''s so simple to be wise. Just think of something stupid to say and say the opposite. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

...0.7.7.7 ---+ Anyone a hint (or a better idea)? R. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

Second test after big upgrade.. -- http://www.PowerDNS.com Open source, database driven DNS Software http://netherlabs.nl Open and Closed source services

...ny mistakes in these filters... Anyone a hint? R. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

...to eth1: ip a a 1.2.3.3 dev eth1 Why is this? R. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

Hi, I am trying to do some simple ingress limiting based on fwmark. I know the ability and sense to do INGRESS limiting is ehm... limited ;-) but still I want to try it. I tried several things. === 1 === tcq ingress handle ffff: tcf parent ffff: protocol ip prio 1 handle 1 fw police rate 12mbit burst 10k drop tcf parent ffff: protocol ip prio 1 handle 2 fw police rate 10mbit burst 10k drop

...o pass the POSTROUTING chain. Is that correct? R. -- ___________________________________________________________________ It''s so simple to be wise. Just think of something stupid to say and say the opposite. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

On Sat, 28 Dec 2019 17:02:09 +0100 richard lucassen via nsd-users <nsd-users at lists.nlnetlabs.nl> wrote: > The problem is (was) that I used "include:" statements in nsd.conf > to load zone information. Apparently nsd does not reread the include > files upon a SIGHUP. I scripted everything into 1 file and a HUP > reread...

This is one of my test classes: class htb 1:10 parent 1:1 prio 0 quantum 2048 rate 160Kbit ceil 400Kbit burst 1803b/8 mpu 0b cburst 2111b/8 mpu 0b level 0 Q1: where does "level 0" stand for? Q2: where does this b/8 stand for? Q3: this is on a i386 platform, so timer resolution should be 10mS. According to the doc the minimal burst should be 10mS*160Kbit=1600. Why is it 1803? Q4: I

http://bugzilla.netfilter.org/show_bug.cgi?id=680 --- Comment #6 from Richard Lucassen <rl-20100926 at xaq.nl> 2011-08-26 14:54:09 --- (In reply to comment #5) > I'm having exactly the same problem. Kernel is 2.6.34.7-56.fc13.x86_64. I > tested the solution (adding the route) and works. Anyhow, it's only usefull for > testing, as the IP address of the "ex...

...100kbit guaranteed bw per RDP session: 20kbit R. -- ___________________________________________________________________ It''s so simple to be wise. Just think of something stupid to say and say the opposite. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

...What am I doing wrong? I''d rather do not use fw selectors. Or should I solve this problem another way? Richard. -- ___________________________________________________________________ Recursion: see recursion +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+ __________________________________________...

...ry What syntax do I need to delete this entry? Richard. -- ___________________________________________________________________ The Linux documentation paradox: You have to know the answer before you ask the question +------------------------------------------------------------------+ | Richard Lucassen, Utrecht, Linux 2.4.14 RedHat 7.1 | | The Netherlands i686/1200MHz/512MB | | Public key: http://www.xs4all.nl/~pe1bbf/pubkey.asc | +------------------------------------------------------------------+

...stem, but that's rather easy to script. Just rsync the zone files and send a HUP to the supervisor. If a nameserver is not reachable it it will autmagically synchronise. Are there good reasons *not* to use nsd this way? This will not be a 1000000 queries per second system BTW. R. -- richard lucassen http://contact.xaq.nl/

...r sessions RDP and a per session limit of 250kb R. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

...I go for eql devices like the doc says? Richard. -- ___________________________________________________________________ It''s so simple to be wise. Just think of something stupid to say and say the opposite. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

...at a class-ID cannot be ''1''? R. -- ___________________________________________________________________ It''s so simple to be wise. Just think of something stupid to say and say the opposite. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+

http://bugzilla.netfilter.org/show_bug.cgi?id=727 Summary: Open your firewall by a simple typo Product: iptables Version: unspecified Platform: All OS/Version: All Status: NEW Severity: major Priority: P2 Component: iptables AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy: