similar to: question on lokkit

Hi, I try to shape my incoming traffic. I have 2MBit/s DSL bandwith and the following ruleset (on the internal interface): $INT="eth1"; $INT_NET=192.168.1.0; $MAX_IN=2Mbps; dev $INT { egress { class (<$int>) if ip_src:24 == $INT_NET; class (<$ssh>) if tcp_sport == PORT_SSH; class (<$smtp>) if tcp_sport == PORT_SMTP; class (<$http>) if

I have used lokkit to setup iptables ( I have a big script that does this) basically just ports I want with "--port=https:tcp" etc... I wish to allow igmp and add igmp to the lokkit command line? How do I do that? I can add this to /etc/sysconfig/iptables: iptables -A RH-Firewall-1-INPUT -i eth1 -j ACCEPT iptables -A RH-Firewall-1-INPUT -i eth1 -p igmp -j ACCEPT iptables-save >

hi All - I tried doing: yum provides "/usr/sbin/lokkit" on CentOS 8 and got No Matches found. Where can I get his for C8? Jerry

On Fri, 31 Jan 2020 at 12:36, Jerry Geis <jerry.geis at gmail.com> wrote: > hi All - > > I tried doing: > yum provides "/usr/sbin/lokkit" > on CentOS 8 and got No Matches found. > > Where can I get his for C8? > > As far as I know you can't. It was last supported in Fedora in F23 2015-03-02 and was removed in later releases. It would need a major

I''m trying to setup a bottlekneck scenario so I can see the effects of the RED qdisc on a congested interface. My example simulation code is at the bottom of this email if someone wants to see it. The following is a snippet form TCSIMs output. 0.602000 E : 0x80bc080 40 : inputB_eth0: 45000028 00000000 40060000 ... 0.602000 D : 0x80bc080 40 : inputB_eth0: 45000028 00000000 40060000 ...

Newbie here... tcng version 10b I''m just learning about htb and using tcng. I am trying to make the example in Martin A. Brown''s Traffic Control with tcng and HTB HOWTO v0.5 example 2 /* * Simply commented example of a tcng traffic control file. * * Martin A. Brown <mabrown@securepipe.com> * * Example: Using class selection path. * * (If you are reading the

My firewall config is below... I am trying to figure out why another machine has access to port 5038 on my machine based on these firewall rules. I thought the reject at the bottom would take care of all other ports? It does not. I have restarted with "server iptables restart" and same thing. I can connect from another machine to my machine on port 5038. How do I prevent this?

Below is my firewall rules for iptables. everything is working fine except for NFS I cannot mount my drive. If I turn off iptables I can mount. Looking at this : http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-nfs.html Important In order for NFS to work with a default installation of Red Hat Enterprise Linux with a firewall enabled, IPTables with the default TCP port 2049

On Mon, 2020-02-03 at 19:04 -0500, Jerry Geis wrote: > Hi All, > > Over the last 20 some years I have a file with about 200K worth of address > that have "wrongly" tried to connect to my boxes running centos. So the > file has one line per address or group of addresses like: > 2.244.112.0/24 > > So using the OLD iptables I would run through my file build the

Hi All, Over the last 20 some years I have a file with about 200K worth of address that have "wrongly" tried to connect to my boxes running centos. So the file has one line per address or group of addresses like: 2.244.112.0/24 So using the OLD iptables I would run through my file build the iptables.txt file and start that with DROP for the IP address. iptables ran through the big

On Tue, 4 Feb 2020 at 05:37, Pete Biggs <pete at biggs.org.uk> wrote: > On Mon, 2020-02-03 at 19:04 -0500, Jerry Geis wrote: > > Hi All, > > > > Over the last 20 some years I have a file with about 200K worth of > address > > that have "wrongly" tried to connect to my boxes running centos. So the > > file has one line per address or group of

this table contains three important clocks: base clock: this is the non boosted max clock tdp clock: the clock at wich the vbios guarentees the TDP won't ever be exceeded at max load (seems to be always the same as the base clock, but behaves differently) boost clock: the avg clock the gpu will stay boosted to. It doesn't seem to affect the

Apparently Verizon is blocking or changing packets on port 5060 so my softphone from my hotspot will not work. How do I set asterisk (11.23.0) to run default 5060 for all other devices I have - BUT for my software run on a different port like 5070? I'm using linphone and is easy to change the ports from 5060 to 5070 ( I think). Thanks, Jerry -------------- next part -------------- An HTML

Hey people, I have the following tcng configuration: #include "fields.tc" #include "ports.tc" dev "eth0" { egress { // Voice traffic class (<$voice>) if udp_dport >= 20000 && udp_dport <= 23000; // SSH connections class (<$interactive>) if tcp_dport == PORT_SSH; //

I guess you are in what I think of as "Newbie Hell." It sounds like you are learning linux like a lot of people, all by yourself. That's how I did it, and it is maddening and worse, very time consuming. The important thing is not to keep hitting your head against the brick wall over and over. So, what to do. First, I would join a linux email support group. I belong to a very good

I am sending an email from my machine devcentos5x64. the transcript below (hangs for 60 seconds) at the line: MAIL From:<root at devcentos5x64.msgnet.com> SIZE=56 AUTH=root at devcentos5x64.msgnet.com The email succeeds - but I am trying to figure out the 60 second delay. Neither email server is busy. Nothing is waiting. the DNS on both machines point to the same nameserver. The DNS

I am trying to setup some rules on a box with 3 nic cards. Two internet connections and one office connection. eth0 is office eth1 is internet T1 eth2 is internet Cable when I do "iptables -F" then iptables -L everything is gone as it should be. Then I do iptables -t nat -A PREROUTING -p tcp -d $MYIP --dport 6550 -j DNAT --to $INTERNAL_ADDRESS:6550 iptables -t nat -A POSTROUTING -d

I've just tried setting up a Shrike (9) version of Redhat. Using the medium settings of lokkit, then adding manually accept commands for ports 137/udp 138/udp, 139/tcp and 445/tcp, I thought I should have been ready to go. This isn't the case, however. I know it's not the smb.conf settup because when I kill iptables samba works. When iptables IS running however, it will respond

To continue here with problems on this compaq v2000 laptop, I put kernel source on a USB disk and plugged it into the v2000. NOTHING IS recognized. I tried to manually mount the disk and nothing either... I thought USB was well established.... I thought trying to recompile the kernel for realtek support might get my networking going... I am stuck??? Jerry -------------- next part

hi all, running centos 4.7 i686. I seem to have an o pen r elay sendmail server. How do I close it? I have the STRAIGHT centos install sendmail.mc file. Only thing I changed was: dnl DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl so as to allow incoming email and not just localhost. however this seems to relay everyone. I looked at http://www.sendmail.org/tips/relaying but it