search for: tcpost

Hi! It''s me again bothering you guys, what I want to do is to give full bandwidth to VPN traffic and limit the rest to 30KB/s (kilobytespersecond), ok? Here''s what I have: tcclasses ################################## eth0 1 1kbps 70kbps 1 eth0 2 1kbps 30kbps 2 default eth1 3 15kbps 10000kbps 1 eth1 4

...hink I''ve found a mistake in the http://www.shorewall.net/ipp2p.html documentation. I''ve been trying to get traffic shaping working on the p2p traffic (Using ipp2p and wonder shaper) and lossing clumps of hair in the process. I followed the web page documentation but the "tcpost" rule that clasifies the packet and actually starts the "castration" process never matached any packets.... Until! I added a ":C" to the final two lines on that page (although it''s only one line in my config). I maybe wrong, but this seems correct as the filte...

Hi All, I''m not convinced I have my tcrules correctly setup and looking at the counters in the mangle table''s tcpost doesn''t really help much as I can''t tell what is the final match. Is there a way to match packets in iptables based on the classifier? i.e. so I can LOG packets classified with 1:18 for example. I can''t see anything in iptables, except matching connmark and mark. The on...

...CONNMARK match !0x0/0xff CONNMARK restore mask 0xff 20313 10M tcout 0 -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x0/0xff00 Chain POSTROUTING (policy ACCEPT 22096 packets, 10M bytes) pkts bytes target prot opt in out source destination 22062 10M tcpost 0 -- * * 0.0.0.0/0 0.0.0.0/0 Chain routemark (1 references) pkts bytes target prot opt in out source destination 648 69251 MARK 0 -- ppp0 * 0.0.0.0/0 0.0.0.0/0 MARK set 0x2 648 69251 CONNMARK 0 -- * * 0.0.0.0/0 0.0...

...ask 0xff Chain POSTROUTING (policy ACCEPT 1533K packets, 866M bytes) pkts bytes target prot opt in out source destination 599K 29M CLASSIFY tcp -- * ppp0 0.0.0.0/0 0.0.0.0/0 tcp flags:0x16/0x10 length 0:128 CLASSIFY set 2:1 1529K 864M tcpost all -- * * 0.0.0.0/0 0.0.0.0/0 Chain tcpost (1 references) pkts bytes target prot opt in out source destination 212K 111M CLASSIFY all -- * * 0.0.0.0/0 0.0.0.0/0 CLASSIFY set 2:2 549K 28M CLASSIFY all...

I''m having troubles with my outbound VOIP connection. I''m convinced that I don''t have QOS/traffic shaping configured properly in my shorewall linux firewall, which serves as my Asterisk VOIP server and Internet router/gateway. I don''t have a separate router box. I''ve been using VOIP for about a year now, but just recently realized that I need to

...-restore-input mx:/usr/share/shorewall# more /var/lib/shorewall/.iptables-restore-input *raw :PREROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] COMMIT *mangle :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :tcfor - [0:0] :tcout - [0:0] :tcpost - [0:0] :tcpre - [0:0] -A PREROUTING -j tcpre -A FORWARD -j tcfor -A OUTPUT -j tcout -A POSTROUTING -j tcpost COMMIT *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] :Drop - [0:0] :Reject - [0:0] :all2all - [0:0] :blacklst - [0:0] :dropBcast - [0:0] :dropInvalid - [0:0] :dropNotSy...

...7K packets, 195M bytes) pkts bytes target prot opt in out source destination 147K 195M tcout all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 2592K packets, 1760M bytes) pkts bytes target prot opt in out source destination 2592K 1760M tcpost all -- * * 0.0.0.0/0 0.0.0.0/0 Chain tcfor (1 references) pkts bytes target prot opt in out source destination Chain tcout (1 references) pkts bytes target prot opt in out source destination Chain tcpost (1 references) pkts bytes target prot opt...

...140.1 DST=83.3.197.202 LEN=28 TOS=0x00 PREC=0x00 TTL=64 ID=33445 PROTO=ICMP TYPE=0 CODE=0 ID=49174 SEQ=37889 > TRACE: mangle:POSTROUTING:rule:1 IN= OUT=eth3 SRC=195.187.140.1 DST=83.3.197.202 LEN=28 TOS=0x00 PREC=0x00 TTL=64 ID=33445 PROTO=ICMP TYPE=0 CODE=0 ID=49174 SEQ=37889 > TRACE: mangle:tcpost:return:1 IN= OUT=eth3 SRC=195.187.140.1 DST=83.3.197.202 LEN=28 TOS=0x00 PREC=0x00 TTL=64 ID=33445 PROTO=ICMP TYPE=0 CODE=0 ID=49174 SEQ=37889 > TRACE: mangle:POSTROUTING:policy:2 IN= OUT=eth3 SRC=195.187.140.1 DST=83.3.197.202 LEN=28 TOS=0x00 PREC=0x00 TTL=64 ID=33445 PROTO=ICMP TYPE=0 CODE=0 I...

Hi, I''m running Slackware 13.37 x86 using Shorewall 4.4.21 with OpenVPN and the VPN options I''m using in Slackware 13.37 will not work in Shorewall, but in Slackware 13.1 using the same Shorewall version and files, the ''interfaces'', ''policy'' and ''zone'', are all I have configured, it was working and this also works in Arch at