search for: mchardy

The IMQ page (http://luxik.cdi.cz/~patrick/imq/) has some rather obvios problems in the examples used. I wrote Patrick McHardy without getting an answer (yet) so I tought this was a good place to ask. Does anybody know how to contact him about this? _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Hi! The netfilter coreteam proudly presents: iptables version 1.3.7 The 1.3.7 version contains accumulated bugfixes to the last 1.3.6 version. This comes a bit earlier after the last release than usual because the endian annotations in 2.6.19 broke iptables compilation, which is fixed with this version. The ChangeLog is attached to this mail. Version 1.3.7 can be obtained from:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings all, Working in concert with the original authors, Klaus Rechert and Patrick McHardy, I have translated their article "HFSC Scheduling mit Linux" [0] on Hierarchical Fair Service Curve (HFSC) into English [1]. http://linux-ip.net/tc/hfsc.en/ Although the original content is not available directly from their website, Linux Magazin published the German article in 2/...

Tom Eastep wrote: > | Have you applied the ipsec+netfilter patches ? Without them, packets > are > | only seen encrypted in the OUTPUT chain. > | > Yes -- the ipsec+netfilter patches are applied. Here is the same test > with the bridge removed and the local ip address transfered to one of > the network cards: The problem is ipv4_sabotage_out in the briding code. It

...ore specific > than "Re: Contents of Bridge digest..." > > > Today's Topics: > > 1. Re: [PATCH/RFC] Reduce call chain length in netfilter > (Bart De Schuymer) > 2. Re: [PATCH/RFC] Reduce call chain length in netfilter > (Patrick McHardy) > 3. Re: [PATCH/RFC] Reduce call chain length in netfilter > (David S. Miller) > 4. Re: [PATCH/RFC] Reduce call chain length in netfilter > (Patrick McHardy) > 5. Re: [PATCH/RFC] Reduce call chain length in netfilter > (David S. Miller) > 6...

The netfilter coreteam presents: iptables version 1.4.4 the iptables release for the 2.6.30 kernel. Changes include: - support for the new features in the 2.6.30 kernel, namely the cluster match and persistent multi-range NAT mappings - support for the ipset set match and target - various minor fixes and cleanups - documentation updates Version 1.4.4 can be obtained from:

http://bugzilla.netfilter.org/show_bug.cgi?id=711 Summary: iptables -m iprange causes unknown error Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: ip_tables (kernel) AssignedTo: netfilter-buglog at

After an: # ip ru flush I loose all my ip rules but the priority 0 one. root@sarasvati:~# ip ru 0: from all lookup 255 root@sarasvati:~# Ok with that, but now i''m not able to insert any new rule. This leads to a total loose of conectivity. root@sarasvati:~# ip ru add from all table default RTNETLINK answers: Numerical result out of range root@sarasvati:~# ip ru add from all

Hello, I haven''t been keeping up with sending ESFQ [ANNOUNCE] messages to this list, but I''ve still been working on the patch. If you''re curious about recent changes, take a look at the home page, ChangeLog, and README: http://fatooh.org/esfq-2.6/ http://fatooh.org/esfq-2.6/current/ChangeLog http://fatooh.org/esfq-2.6/current/README Meanwhile, I''m interested

I found following paragraph in the man page of iproute2. equalize allow packet by packet randomization on multipath routes. Without this modifier, the route will be frozen to one selected nexthop, so that load splitting will only occur on per-flow base. equalize only works if the kernel is patched. ^^^^^^^^^^^^^^^^^ Now, where

...adi Salim * Fix handling of XFRM monitor and state * Fix ip rule flush, need to reopen rtnl Stephen Hemminger * Update to 2.6.14 sanitized headers * Add more CBQ examples from Fedora Core * Fix buffer overrun in iproute because of bits vs. bytes confusion Patrick McHardy * Fix ip command shortcuts

Hi Folks: I am either using the multiport of the -m or --match option of iptables in correctly or there is a bug with it. Is anyone else using it with no problem? This is the way I am trying to use it: my_ports=21,25,80 iptables -t nat -A PREROUTING -i $wan_addr -p tcp -m multiport --dports $my_ports -j DNAT --to $my_internal_address I have used this in the past successfully but that was a

...to INPUT,OUTPUT, and FORWARD. Was he not using the terms egress and ingress correctly? I see that the current ''big'' problem is touching locally generated traffic. What I need to know is which version of IMQ is most stable for kernel 2.6? Or even kernel2.4? Is it Devera''s? McHardy''s? Correa''s? or Roy''s? Or should I just leave it alone? My apologies if I got names wrong. This is probably a long email just to ask that question, but I can''t seem to find an answer from the list archives. I downloaded the whole 46 mb archive and essentially re...

Hi! The Netfilter project proudly presents: iptables 1.4.17 More relevantly, this release includes the IPv6 NAT extensions from Patrick McHardy, the ignore day transition from Florian Westphal and a couple of fixes. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/iptables/downloads.html ftp://ftp.netfilter.org/pub/iptables/ Have fun! -------------- next part...

...more precise like that: "By default IMQ in PREROUTING comes before nat and in POSTROUTING after nat, so in both cases IMQ knows ip addresses as masqueraded (nated) if it is used. This could be changed with kernel parameters IMQ_BEHAVIOR_??". My opinion is based on IMQ patch by Patrick McHardy from www.linuximq.net. Best regards, Jarek Poplawski

Hi I would want to use the patch for squid released by patrick mcHardy, but it requires that squid is located on the same machine that does traffic shaping. My configuration is different: i have the screening HDSL router directly connected to a multi-ethernet firewall and the proxy located on a DMZ box. i would want the firewall doing traffic shaping. In...

Hi Patrick ! I find simple error in extensions/libipt_ROUTE.c line 24 and 127 -- change NETFILTER_VERSION to IPTABLES_VERSION extensions/libipt_IMQ.c line 18 and 87 -- change NETFILTER_VERSION to IPTABLES_VERSION (iptables-20020618) ----------------------------------- mailto:alexey_talikov@texlab.com.uz BR Alexey Talikov FORTEK -----------------------------------

...includes ip6tables. ip6tables is used for configuring the IPv6 packet filter. This release includes fixes and a couple of new features: * --nowildcard option for xt_socket, available since Linux kernel 3.11, from Eric Dumazet. * SYNPROXY support, available since Linux kernel 3.12, from Patrick McHardy. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/iptables/downloads.html ftp://ftp.netfilter.org/pub/iptables/ Have fun! -------------- next part -------------- Eric Dumazet (1): xt_socket: add --nowildcard flag...

The netfilter coreteam presents: iptables version 1.4.3 the iptables release for the 2.6.29 kernel. It has been some time since the last release and we've had a lot of changes all over the place. Besides the usual fixes and cleanups, we have: - numerous documentation updates from Jan Engelhardt and others - a set of changes to move some of the iptables functionality to a shared

...t; > >Today's Topics: > > 1. Simple example of bandwidth management (Roberto Arcomano) > 2. Determining tbf parameters (Alex Leyva) > 3. Re: How to mark a device not to be used with IMQ? (Martin Devera) > 4. Re: How to mark a device not to be used with IMQ? (Patrick McHardy) > 5. Re: How to mark a device not to be used with IMQ? (Patrick McHardy) > >--__--__-- > >Message: 1 >From: Roberto Arcomano <berto@fatamorgana.com> >To: lartc@mailman.ds9a.nl >Date: Fri, 22 Mar 2002 19:10:44 +0100 >Subject: [LARTC] Simple example of bandwidth ma...