similar to: SIP qualify question.

I am in the process of building up an Asterisk-based voice network using PAP2-NA SIP clients from Linksys. Our network consists of several disconnected private networks (unaware of each other), and are all proxied out to the Internet via a Linux server. Our Asterisk PBX lies on the Internet on yet another network. I'm hoping to get all SIP clients (PAP2-NA's) to register at the central

On a custom compiled Linux 2.6.13 kernel... # tc qdisc add dev ppp145 handle ffff: ingress # tc filter add dev ppp145 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 384kbit burst 10k drop flowid :1 RTNETLINK answers: Invalid argument This works fine on a CentOS machine and my Fedora Core 2 box with default kernel. I''m trying to figure out what is missing in the

--On Wednesday, April 29, 2015 08:35:29 AM -0500 Matt Garman <matthew.garman at gmail.com> wrote: > All indications are that CentOS 6 seems to be much more "aggressive" > in how it does NFS reads. And likewise, CentOS 5 was very "polite", > to the point that it basically got starved out by the introduction of > the 6.5 boxes. Some things come to mind as

On Wed, Apr 29, 2015 at 10:36 AM, Devin Reade <gdr at gno.org> wrote: > Have you looked at the client-side NFS cache? Perhaps the C6 cache > is either disabled, has fewer resources, or is invalidating faster? > (I don't think that would explain the C5 starvation, though, unless > it's a secondary effect from retransmits, etc.) Do you know where the NFS cache settings

Hello, 1) Thanks - shorewall save me a lot of time! 2) I try - exactly: I must :-) - configure a VPN server behind 2 NATs. My situation: RoadWarior - INet - ISP Router (NAT+PortForwarding) - Inetranal Router (running Shorewal, NAT+PortForwarding) - Inetranl VPN Server If RoadWariror try to connect Internal VPN Server then connection failed with "GRE: Bad check chcksum from pppd"

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=68 Summary: Kernel panic Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: critical Priority: P2 Component: unknown AssignedTo: laforge@netfilter.org ReportedBy:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=549 Summary: kernel oops when trying to remove ip_conntrack module Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: Fedora Status: NEW Severity: critical Priority: P2 Component: unknown AssignedTo:

I know this isn''t a shorewall question, but I hope somebody might be able to point me the right direction. here''s the error: Apr 10 18:19:07 trinity kernel: BUG: using smp_processor_id() in preemptible [00000001] code: modprobe/11068 Apr 10 18:19:07 trinity kernel: caller is ip_conntrack_init+0x255/0x369 [ip_conntrack] Apr 10 18:19:07 trinity kernel: [<c02ec398>]

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=511 Summary: Premature ip_conntrack timer expiry on 3+ window size advertisements Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: minor Priority: P2 Component: ip_conntrack

Hi ! I hacked together a couple of patches for Openssh 2.1.1p4 port forwarding. It is a one patch file that does the following two things: First: If the server is configured not to allow port forwardings it sends SSH_SMSG_FAILURE (protocol 1) while openssh client expects SSH_SMSG_SUCCESS. When the client gets the failure it exists with protocol error message. This patch will accept both failure

--mYCpIKhGyMATD0i+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Netfilter Core Team Security Advisory =20 CVE: CAN-2003-0187 Subject: Netfilter / Connection Tracking Remote DoS Released: 01 Aug 2003 Effects: Any remote user may be able to DoS a machine

Hi, I know that this is a known problem but I don''t know the solution. I have a linux server with iptables, kernel 2.4.17. Now in logs appear (Debian): kern.log: Mar 1 23:12:55 cpie kernel: ip_conntrack: table full, dropping packet. Mar 1 23:13:56 cpie last message repeated 10 times Mar 1 23:13:59 cpie last message repeated 3 times Mar 1 23:14:10 cpie kernel: NET: 1 messages

This was due to a ProxyRequests On Let this be a lesson to all. [root at localhost log]# cat /proc/net/ip_conntrack | wc -l 11042 [root at localhost log]# cat /proc/sys/net/ipv4/ip_conntrack_max 28632 [root at localhost log]# cat /var/log/messages ... Sep 2 04:04:30 localhost kernel: printk: 213 messages suppressed. Sep 2 04:04:30 localhost kernel: ip_conntrack: table full, dropping

I was trying to do what the article at http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables <http://www.austintek.com/LVS/LVS-HOWTO/HOWTO/LVS-HOWTO.performance.html#conntrack_filling_tables%3C/blockquote%3E%3C/div%3E> suggested My iptables rules are ------------------------------------------------------------------------ #that's what the

Hi developer, i got a problem and need your help!(my english not very good) My KVM host in IDC, and there are some restrict in there lead to me connect to KVM host by port 22 or 16509 impossible. In generally If i want login my KVM host i must login in to a "stepping stones" first, then login to that KVM host.( Now assume that the KVM host ip is 1.1.1.1 and the "stepping

Hello I''ve got a server with 3Gb of ram and I want to keep 256 for the system and allocate the rest to conntrack ... I''ve tried to change the HASHSIZE of the ip_conntrack but dmesg return me this error ! ip_conntrack version 2.4 (2097152 buckets, 16777216 max) - 236 bytes per conntrack ip_conntrack: falling back to vmalloc. .... I''ve use this "math"

[root at tcs stat]# uname -a Linux tcs 2.6.9-5.0.5.ELsmp #1 SMP Wed Apr 20 00:16:40 BST 2005 i686 i686 i386 GNU/Linux [root at tcs stat]# pwd /proc/net/stat [root at tcs stat]# ls -al total 0 dr-xr-xr-x 2 root root 0 Jun 3 18:51 . dr-xr-xr-x 5 root root 0 May 31 23:12 .. -r--r--r-- 1 root root 0 Jun 3 18:51 arp_cache -r--r--r-- 1 root root 0 Jun 3 18:51 ip_conntrack -r--r--r-- 1 root root

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=64 Summary: Conntrack-Table is not cleared on inferface down using target MASQUERADE Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: other Status: NEW Severity: normal Priority: P2 Component: NAT

https://bugzilla.netfilter.org/show_bug.cgi?id=830 Summary: ??iptables????????? Product: iptables Version: unspecified Platform: All OS/Version: RedHat Linux Status: NEW Severity: major Priority: P5 Component: iptables AssignedTo: netfilter-buglog at lists.netfilter.org ReportedBy: higkoohk

Hi, has anybody seen a patch that provides socks version 5 support for the dynamic portforwarding feature? I?ve seen thats implemented in ssh.com?s ssh version, but found nothing about openssh. Only thing i found was a patch to provide socks4a. cu sleepi