similar to: shorewall, ucarp & conntrackd on debian

Thanks for the reply. You are quite right about the routing, and i've advanced to the bridging part. But it will not work. I've finaly gotten access to the switch it's connected to and from the logs i've got this output: Jan 26 16:49:56: %SPANTREE-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 4 on GigabitEthernet0/1 VLAN40. Jan 26 16:49:56:

Hi, I have a router that got its second link. I was trying to do load balancing, but i can not get it to work properly. Just one link works at time, and is always the second in the command ip route add default table 222 proto static. Am I missing something? My script is below. I am using Debian, tried with kernel 2.6.19 (my compilation) or debian''s one (2.6.18-3-486), same results

https://bugzilla.netfilter.org/show_bug.cgi?id=1445 Bug ID: 1445 Summary: conntrackd: segfaults when not disabling internal cache Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: critical Priority: P5

Hi. Is anyone using conntrack-tools to implement gateway failover on a network with windows clients? I set it up with ucarp and keepalived, and found that gratuitous ARP doesn''t always seem to update the cache on Windows machines. It works the first time, but if a second failover happens, the client continues to send stuff to the wrong MAC address. Linux machines work fine.

https://bugzilla.netfilter.org/show_bug.cgi?id=1123 Bug ID: 1123 Summary: conntrackd will not accept connection records into kernel table from another machine Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: major Priority: P5

Has anyone toyed with using Shorewall in conjunction with the userland implementation of the OBSD-based common address redundancy protocol? Would like any preliminary feedback before I devote time to the project. Details on UCARP: http://www.ucarp.org/ Details available on OBSD CARP: http://www.openbsd.org/lyrics.html http://www.openbsd.org/cgi-bin/man.cgi?query=carp

Morning Folks, should I prefer NFS with UCARP or native GlusterFS mounts for serving the system images to XCP? Which one performes better over 1G network links? NFS is probaby easier to setup due to existing tools like rpcinfo and showmount, both are used inside the storage container code, and there is some code for NFS, not for GlusterFS, except I write one. UCARP has the disadvantage that

Hi all. I currently try to start conntrackd to test it. CentOS release 6.3 (Final) Linux lb1.local 2.6.32-279.11.1.el6.x86_64 #1 SMP Tue Oct 16 15:57:10 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux This is a VirtualBox vm. I try: /usr/sbin/conntrackd -C /etc/conntrackd/conntrackd.conf -d My config: [root at lb1 log]# egrep -v '^\s*#|^$' /etc/conntrackd/conntrackd.conf | less Sync {

https://bugzilla.netfilter.org/show_bug.cgi?id=1381 Bug ID: 1381 Summary: Conntrackd segfaults when committing external caches Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: conntrack-daemon

Has anyone successfully setup a shorewall Ucarp solution?

Hi, I´m trying use conntrackd, shorewall and keepalived. Conntrackd (now know as conntrack-tools) is working ok, keepalived too, but i don´t know how to put some iptables rules in shorewall. eth0 is the local area (192.168.0.0/24) eth1 is the net area (192.168.1.0/24) [1] iptables -P FORWARD DROP [2] iptables -A FORWARD -i eth0 -m state --state ESTABLISHED,RELATED - j ACCEPT [3] iptables -A

https://bugzilla.netfilter.org/show_bug.cgi?id=1229 Bug ID: 1229 Summary: conntrackd man page "State <policy> {<states list>}" Product: conntrack-tools Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component:

Hi, we've successfully configured GlusterFS mirroring across two identical nodes [1]. We're running the file share under a Virtual IP address using UCarp. We have different clients connected using NFS, CIFS and GlusterFS. When we simulate a node failure, by unplugging it, it takes about 5 seconds for the CIFS and GlusterFS clients to refresh the connection and continue operation. The

https://bugzilla.netfilter.org/show_bug.cgi?id=999 --- Comment #2 from Wolfram Schlich <wolfram at schlich.org> --- (In reply to Pablo Neira Ayuso from comment #1) > Are you sure that your kernel supports CONFIG_NETFILTER_NETLINK and > CONFIG_NF_CT_NETLINK. Yes, pretty sure: --8<-- zephyr ~ # zgrep CONFIG_NETFILTER_NETLINK /proc/config.gz CONFIG_NETFILTER_NETLINK=y

My setup: LAN A | |-- Wireless-r1 --| |-- Wireless-r2 --| ..................| .................LAN B LAN A is my primary (external) LAN. LAN B is my wireless LAN. LAN A does iBGP and OSPF routing. Each wireless router does the following: 2 Bridged Ethernet + STP connections to LAN A 2 Bridged Ethernet + STP connections to LAN B 2 VLANs on LAN A 5 VLANs on LAN B UCARP on each wireless

Hi! The Netfilter project proudly presents: conntrack-tools 1.4.3 The conntrack-tools are a set of tools targeted at system administrators. They are conntrack, the userspace command line interface, and conntrackd, the userspace daemon. The tool conntrack provides a full featured interface that is intended to replace the old /proc/net/ip_conntrack interface. Using conntrack, you can view

Hi! The Netfilter project proudly presents: conntrack-tools 1.2.0 This release is a major milestone that includes support for expectation synchronization and the new nfct utility that, by now, only supports the new cttimeout infrastructure. See ChangeLog that comes attached to this email for more details. You can download it from:

Hello i want to luanch an URL in my PC when i call a number like below exten => 066104xxxx,1,Set(CALLERID(number)=52xxxxxxx) exten => 066104xxxx,n,MixMonitor(zap_g1_${EXTEN}_${UNIQUEID}.wav|av(0}V(0)) exten => 066104xxxx,n,Dial(Zap/g1/${EXTEN},30,A(this-call-may-be-monitored-or-recorded)) exten => 066104xxxx,n,http://192.168.5.109/interface2/interface2.php ( here i want to launch

Hi! The Netfilter project proudly presents: conntrack-tools 1.4.6 The conntrack-tools are a set of tools targeted at system administrators. They are conntrack, the userspace command line interface, and conntrackd, the userspace daemon. The tool conntrack provides a full featured interface that is intended to replace the old /proc/net/ip_conntrack interface. Using conntrack, you can view

Hi, So, I am writing a module to install and configure ucarp. There is only one module in puppet forge and that is not that good. In ucarp, same configuration files have to be served on two servers and to configure the host I am defining a custom resource ucarp::host::config. So, for using, I''ll have to create this resource two times on two different servers. So, this resource