search for: routability

Hi, I have what to me is an interesting issue. I am wanting to prioritize (QoS) traffic that will be passing through an IPSec (OpenS/WAN) VPN between two (identical) Linux routers. I know that I can apply the IPSec patches (1-4) to the kernel and IPTables (if they are not already applied by now) filter traffic before and after IPSec encapsulation. My problem is that I don''t know

I''m rate limiting and prioritizing traffic upstream of a slow wan link using htb, classic wonder shaper type stuff. I''m using the following command for traffic that does not match any of my defined filters: tc qdisc add dev eth0 root handle 1: htb default 50 It appears that local, non-routable traffic like arps and igmp are being snared by this and end-up queued in the lowest

Hi, We have configured several xen guest OSes on a server running SLES10. The physical server is a Sun 4200 with 3 NICs installed, configured, and working. Each of the xen guest OSes have three virtual nics, configured for RAC, Interconnect, and public IPs as follows; eth0 - public (routable and registered in DNS) eth1 - private (not routable, uses a seperate network subnet for

Hi everyone, I have a question regarding the default gateway for hosts on DMZ zone. I moved servers from parallel to the DMZ (outside the firewall, directly connected to I-net) to inside DMZ. The default gw for these servers was the DSL router(bridge) of my ISP. What should be the default gw (for the hosts inside the DMZ), when hosts are inside the DMZ now - still the DSL router (external

Greetings all! I just got a colocated server space and the ISP has given me an IP address and a routable /29 subnet. Here''s a partial snippet of the info they gave me (with the real addressess changed for privacy) ==== WAN Address Customer IP Address : 100.0.33.14 Netmask : 255.255.255.248 Broadcast Address : 100.0.33.15 Default Gateway :

Dear all, Has anyone experienced this whilst running DRBD over eth1 between two CentOS 5.7 servers? eth1 is a private IP address, unroutable. eth0 is the public address. CentOS will reply sometimes once every 3 days or every 14mins~ saying "My public IP is on eth1" to arp requests when it's not, it's eth0. This freezes traffic and causes issues. We've looked at arp*

Hello, All is fine when I run in development mode with rails + lighttpd. I''m using the lighttpd.conf file that is auto-generated by Rails. Works just fine in developemtn mode. When I swith to production mode and use my externally routed domain name lighttpd refuses to bind to the address. I know the address works since I run a mail server behind it. I can ssh to it, etc. I have

I am experimenting with kvm on a quad x86_64 running CentOS-5.5. I have created my first virtual guest and it seems to run fine. Now I wish to assign that particular guest to a fixed, public IP address. There seems to be at least two ways to proceed and I am soliciting comments on the preferred approach. In the first instance I can use brctl to create a bridged 'shared physical device'

Hello Shorewall gurus, I have a dilemma with a public server. I want to migrate the current public server over to a new machine behind the current server''s firewall (shorewall 1.4). I have included a diagram below to help explain the target network I am working toward. I have read the shorewall online documentation and though I have used Shorewall the past 4 years in the current

Hello, Correct me if I'm wrong, but what you get from Icecast *is* HTTP. Anyway, we use proxying because on our server, some of our clients cannot connect to port 8000 without bypassing their company firewall, and we don't have the possibility to add another public IP. So with Apache, here is what we do : ######################################################################## # #

I hope this list is still active. I''m an experienced Linux Sysadmin, but I haven''t done much in the way of routing. Due to a decision made by my higherups, I need to jam a computer between my ISP and my LAN to do bandwidth throttling. My current setup: 1 Crappy Cable Modem (7Mb/768Kb connection) with a static IP. 4 servers (all have static, routable IPs) - One of which is

I been running shorewall with out any problems for several months. But I''ve now run into a problem. Hopefully this will be enough information. I''m running shorewall version 1.4.8. On Fedora core 1. Coming into my location I have a T1. I have 5 internet routable IP''s. I''m currently using one as my default internet connection. My ISP''s router is

In a previous thread, Tom listed advantages (reproduced below) of Proxy ARP over NAT. They are great reasons, but I have one reservation. By using private addresses with NAT for servers in my DMZ, I can granularly allow specific traffic, such as to/from the SMTP gateway/relay in the DMZ, to connect inbound from the DMZ to an internal (LOC) mail server, and know that it comes only from a

Hello all, hope all is well this maybe outside of libvirt-users.... Can you nest macvtap devices to ultimately receive a real routable ip on the nested vm? I have a nested vm up and running. Both vm and nested vm are centos 7 on arch linux host. The first vm uses a macvtap in bridge mode receives dhcp from an external dhcp server. I start the second vm and dhclient hangs and never receives an

Ashwin Surendran <Ashwin.Surendran at now-health.com> schrieb: > What settings have you got for directmedia? > > Could you try > > nat=force_rport,comedia > directmedia=no Tried. Peer always unreachable, call not possible... :( Other idea? Thanks Luca Bertoncello (lucabert at lucabert.de)

I've split this thread off from another (PJSIP authentication) because I think the root cause is something different. I think the problem is the following FROM line in my SIP INVITE transaction: From: "MYNAME" <sip:16667778888 at 172.31.253.4>;tag=773a3e6a-a677-4fb1-95fc-54b379b650a4 The IP address above is an internal/non-routable IP, so Twilio is rejecting it. For some

Le 23/05/2014 12:44, "Thomas B. R?cker" a ?crit : > Hi, > > On 05/23/2014 09:34 AM, Hoggins! wrote: >> Hello, >> >> Correct me if I'm wrong, but what you get from Icecast *is* HTTP. > For a listener, Icecast is just an ordinary HTTP 1.0 server. > For a source client Icecast used to be a non-standard extension and used > the SOURCE method. We've

Hi, I have a network with 4 NIC, one external, DMZ, and two internal, B & C. It has been setup correctlly and working now. The problem I have now, is any client workstation running on network B, MSWindows 2K / XP / NT cannot connect to the primary domain controller which is in network C. The clients cannot even see the network domain in the explorere window. I believe the problem is

Hi, I have a question. I have a routeable /24 netblock including a server at a colocation and I would like to use tincd to tunnel part of that netblock to an internal network on another location being connected to the internet via gateway with DSL link and a single static IP address, so I can use public routable IP addresses on the local network. I have tincd 1.0 pre7 installed on both the local

Not normally a question for this group, but you guys are very bridge/router/firewall savvy, so I thought I''d toss it here. I have a bridge. On one side of the bridge is that fancy thing called the Internet. On the other side is my LAN. The bridge is the obvious demarcation line and a good place to put a firewall. Now, I have all my iptables stuff planned out, EXCEPT for nat. The