similar to: [Fwd: Re: custom route for forwarded traffic]

Hi, I have two networks, users and servers connected via vpn (ipsec). Both internal networks. The routing is fine and connections work both ways. Accordingly both networks have a firewall each which faces the internet and they create the vpn link between each other. Both firewalls have only one external IP (if they had more, I wouldn''t be asking). The servers network''s

Hi, got a 25/25Mbit connection which is quite stuffed. So I applied htb rules. Uplink: class htb 1:1 root rate 24500Kbit ceil 24500Kbit burst 4661b/8 mpu 0b overhead 0b cburst 4661b/8 mpu 0b overhead 0b level 7 Sent 430600689269 bytes 730147320 pkt (dropped 0, overlimits 0 requeues 0) rate 23057Kbit 5520pps backlog 0b 0p requeues 0 lended: 199673949 borrowed: 0 giants: 0 tokens: -964

Hello, I am using the following iptables POSTROUTING rule to NAT some RFC 1918 addresses: iptables -t nat -A POSTROUTING -s 192.168.19.23 ! 192.168.0.0/255.255.0.0 -p tcp --dport 80 -j SNAT --to-source 10.32.4.2 (I am using SNAT instead of MASQUERADE for performance reasons). I have several addresses on the 192.168.0.0/16 subnet that I am SNAT''ing similarly. Problem is, ''tc

Hi, Thanks for the reply. Mohan Sundaram wrote : > mark in iptables and use tc to classify using mark. Mark like this ? iptables -A INPUT -m layer7 --l7proto bittorrent -j MARK --set-mark 3 and then.. tc filter add dev eth0 protocol ip parent 1:0 1 handle 3 fw flowid 1:10 and lets say we have a flowid 1:3 declared to use at 60kbit ceil 60kbit Is that proper ? If so then it

Hello everybody. I would like to do some kind of shaping inside an ipsec tunnel implemented by Openswan and linux 2.6.18.x with xfrm (no KLIPS): for example, to limit outbound smtp traffic inside the tunnel. Question: where should I attach the qdisc to? Eth0? I''m asking this, because tcpdump only see the ESP packet on the eth0 and not the ''clear'' packet. TIA This is my

Hi All, I need to establish an IPSec tunnel between two FreeBSD systems, using IPv6 addresses.The connetcion is host-to-host between two FreeBSD( RELEASE 4.11) systems with KAME IPSec implementation. I tried to establish the connection, but it has some problems which are explained below. |----------------->| host1-[mohan]| |host2-[ram]

Hi All, I need to establish an IPSec tunnel between two FreeBSD systems using IPv6 addresses.The connetcion is host-to-host between two FreeBSD( RELEASE 4.11) systems with KAME IPSec implementation. |----------------->| host1-[mohan]| |host2-[ram] |<-----------------| host1 IPv6 address : fe80::2b0:d0ff:fe6f:dfa0 host2 IPv6 address :

i want to tag categories to its menuname. i have a csv containing menu item name and in other csv i have a column containing some strings, i want to pick that strings from categories and look into menu items if any menu item containing that string i want to create a new column next to menu item name flagged as 1 otherwise 0 and the only condition is once a menu item flagged as 1 i don't need

Normally when we talk about traffic control, we are talking about doing traffic control (tc) using a router, ie packets into an interface and based on routing, they goes out to somewhere else. However I have a box with two interfaces, eth0 and eth1 added to a bridge br0 and I would like to perform traffic control via the two interfaces. Is that supposed to work the same as the router

Hi while usings DavidS mysql module with its custom mysql types I hit some kind of a chicken/egg problem: While deploying mysql, I also like to define some mysql munin user, to enable munin monitoring for mysql things. I choosed to use the mysql_user type from DavidS and it works perfectly. However I start using the custom types on a host where mysql have already been installed. Now I should

Dear all, I've got many responses to my initial question, which is stated below. However, from those responses it has become clear that I need to rephrase my problem. All responses dealt with subscripting the data matrix before 'apply' is run on it. But this is not want I wanted to do. 'apply' cycles through rows or columns of a matrix, and runs a function on each row or

Dear all, I am using Cairo version 1.4-5 for plotting R graphs on a Gentoo system that does not have X11 installed. I have full control on the fonts when running R in interactive mode. But when running R in batch mode I cannot change e.g. font size. Letters (including symbols) are, however, drawn. I am exporting the following environemntal variables when running R in batch mode to point to

Dear all, I've sent this question to the r-help mailing list, but maybe it is better suited for the r-sig-debian mailing list, although this is not Debian (but still Linux): I am using Cairo version 1.4-5 for plotting R graphs on a Gentoo system that does not have X11 installed. I have full control on the fonts when running R in interactive mode. But when running R in batch mode I cannot

Dear all, I am having exactly the same problem as Andy on an Intel Mac (see below / https://stat.ethz.ch/pipermail/r-sig-mac/2009-May/006208.html) with the degree symbol. I am using R version 2.11.1 (2010-05-31) on Xubuntu 10.04 with Windows fonts copied from /WINDOWS/Fonts and included via 'sudo dpkg-reconfigure fontconfig' and 'sudo fc-cache'. Any help would be highly

Dear all, I am stuck with a problem that might be trivial for most of you (and therefore is a bit embarrassing for me...): I want to calculate a generalized least squares regression using two time series (Y depending on X) with an autoregressive correlation structure of order two (the data along time are given below). I use 'gls' from package 'nlme': Calib.gls <- gls(Y~X,

Hi, I have designed the following function to extract count frequencies from an array of integers. For example... # Tipical array x <- cbind(1,1,1,1,1,2,2,2,2,3,3,3,3,4,5,6,7,22) # Define the frequency function frequency <- function(x){ max <- max(x) j <- c() for(i in 1:max){ j[i] <- length(x[x==i]) } return(j) } fre <- frequency(x) plot(fre) How

Hi, I have an DNAT ISSUE with PREROUTING. This is my setup. I have 2 firewalls running iptables. Pls asume 1.2.3.4/29 is the internet interace of FIRST firewall. 2.3.4.5/29 is the internet interface of SECOND firewall. it has DMZ zone. in that DMZ zone, mail server runnig @ 192.168.100.3 Now I want to DNAT port 25 of FISRT firewall ( i.e - its ip address - 1.2.3.4/29) to the internet ip

Hi all, I have managed to setup a Fedora 7 box with 3 ethernet cards and two ADSL modem/routers from different suppliers as LARTC recommends. I am able to direct traffic for specific internal IPs either to one or the other ADSL line. However, I am faced with two problems I am struggling for the solution: 1. I have opened a few ports on the ADSL router/firewalls to talk to internal hosts; say when

I just realised that reply goes to the member instead of the list. Has this changed recently? Mohan

-------- Original Message -------- Subject: Re: [LARTC] DNAT rule for vsftp (PASSIVE FTP) Date: Fri, 05 Oct 2007 12:17:42 +0530 From: Mohan Sundaram <smohan@vsnl.com> Reply-To: smohan@vsnl.com To: Indunil Jayasooriya <indunil75@gmail.com> References: <7ed6b0aa0710042251u6442fb85ma74e46aa9d3f81f9@mail.gmail.com> Indunil Jayasooriya wrote: > Hi all, > > I want to run