search for: manchotnetwork

hi all, curious is anyone has successfully sent http get packets to userspace for blacklist filtering ... i''d like to do a live cd that would obviate the neccessity to install squid and squidguard, but rather, have iptables send packets to squidguard (or something else) directly ... cheers charles

Here''s a challenging problem for you experts to tackle: I''m trying to shape traffic going into an IPSEC interface which then goes over a DSL PPPoE interface. I figure I need to shape the DSL interface to keep it''s hardware queue mostly empty, and to

Hi all, ive been reading lartc howto, im new about traffic shaping/police. As far as red (chapter 9 complete) i saw that first the packet passes at the ingress qdisc, then it passes to the ip stack if the packet is directed to the box or its forwarded (is my case), then it falls to the egress classifier/s. Now, i understand if i have an ipsec vpn at the outside interface, the egress

...ging the list at > lartc-admin@mailman.ds9a.nl > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of LARTC digest..." > > > Today''s Topics: > > 1. Re: [Fwd: Re: [LARTC] Simple HTB setup with tcng] (lartc@manchotnetworks.net) > 2. tcng ingress policing question (Simon Oosthoek) > 3. imap problems (Lars Oeschey) > 4. Re: imap problems (Jason Boxman) > 5. Fax Message Received (Devik) > > --__--__-- > > Message: 1 > Subject: Re: [Fwd: Re: [LARTC] Simple HTB setup with tcng] &g...

...s tc filter add dev eth0 parent 1:0 protocol all prio 1 u32 match u32 \ 0xa000001 0xffffffff at 12 classid 1:1 But I thought it was necessary to have a "root" htb class on the top of the hierarchy to get it working as expected. Is that true ? Thanks Le mer 05/05/2004 à 13:41, lartc@manchotnetworks.net a écrit : > ooops, > > j''ai oblier l''autre ligne: > dev eth0 { > htb () { > class ( rate 600kbps, ceil 600kbps ) if ip_src == 10.0.0.1; > class ( rate 1000kbps ) if 1; > } > } > > > On Wed, 2004-05-05 at 10:15, Cl...

Hi all, We have 2 class C networks that are connected by a Linux router with the internet. We want to apply traffic control (bandwidth control). For that we wrote the tcc script below. We have 2 problems: 1. To establish a 2 megagit download we must actually set the value to 2500kbps. Is there a possible reason for that? 2. If we enable the WAN device we get very hight ping times (they change

Hello all, I am trying to set up a simple htb based system, where packets with source ip 10.0.0.1 should have their own class. I plan to use tcng to set it up easier. Is there something wrong in my tcng file ? ~/tcng$ cat htb /* */ #include "fields.tc" #include "ports.tc" dev eth0 { htb ( ) { class ( rate 600kbps, ceil 600kbps ) {

Hi, this is my Linux Box ---------------------------- LAN 1 -----|--eth1 <---br1--->eth0.1 | | \ | | eth0--|----- 802.1q tagged 1 Mbps link | / | LAN 2 -----|--eth2 <---br2--->eth0.2 | ---------------------------- I have to bridge the 2 lans

Hello, i am writing a iproute2 java gui, and i just started. I would like to make some questions, since i have been using tc as an administrator, but not developing anything to do with it. 1.- I want to display statistics, create queues, etc... are there any libraries i can use, or simply i have to use system calls from java? 2.- Does anybody thinks this is helpless, or it is helpfull? 3.-

hi all, i''m having problems building a module from my tcng configuration file. could someone verify the syntax for building a kernel module? i did it as shown below ... module gets built but i cannot load it. thanks charles ps -- sorry, don''t know c++ :-) [root]# cat /etc/tcng.test #define LAN "eth0" #define LAN_INGRESS 750000 #define LAN_EGRESS 750000 dev

hi trevor, well, if you''re controlling whats going over the vpn then there are several options: i''ve been playing with racoon lately (well longer then with freeswan) so i''m not so sure with ipsec, but ... it appears that the meta-data ( i.e. packet marking) is perserved on packets that have not yet been encrypted but are going to be. as a general strategy, i would

hi all, could someone describe where the encryption & de-encryption is in the kptd? thanks! charles _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

hi all, sorry for the re-post, but i am in a bad way ... trying to fwmark in OUTPUT --mangle has led to a null result for a routing table lookup. has anyone successfully accomplished this -- can you comment on your distro/iptables version ? in your debt, charles on redhat 8 with iptables 1.2.8 _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl

hi all, just wondering what everyone would think about iptables --append POSTROUTING or OUTPUT --table nat --jump rt_lookup this would ask for a new route lookup as a packet traverses the nat table (done once) and would enable the effective marking/routing of locally generated packets, as well as determining a potentially new out-interface, etc, after natting. can anyone comment on potential

hi all, i have an asterisk install with a digium 4 port fxo card and cisco 7960 sip phones -- running on a compaq Pentium III (Coppermine) at 800Mhz 256KB cache and 1GB of ram. when a call comes in on zap/1-1 for example, the delay between when zap sees the line going to ring state, and when the desktop telephone rings can be as long as 7000 milliseconds (or about 3 or 4 rings on an ear piece).