Displaying 20 results from an estimated 4000 matches similar to: "iptables marks"
2007 Apr 04
13
tc questions
Hi to all of you!!!
I am a Computer Science student trying to do the pre-grade thesis. I am trying
to develop a free software tool to help administrators to control the
traffic. Right now this tool is based on tc and iptables.
I am having some problems trying to understand tc and tc examples:
- Why in almost every list of tc rules based on htb class, there is a "tc
qdisc dev ... root ...
2007 May 01
1
Re: LARTC Digest, Vol 26, Issue 25
Hey Andreas, how i catch this traffic using L7 filter?, i´ve installed l7
filter now, but i don´t kwnow to use the kind of filter...!!!
Can you help me?
Thx.-
Terraja-based
2007/4/29, lartc-request@mailman.ds9a.nl <lartc-request@mailman.ds9a.nl>:
>
> Send LARTC mailing list submissions to
> lartc@mailman.ds9a.nl
>
> To subscribe or unsubscribe via the World
2005 Feb 18
2
Complex Traffic shaping setup
Hi!
I have the following setup using iproute2:
========
| Root |
========
|
| ===============
------------| Box Level 1 |
| ===============
|
| ===============
------------| Box Level 2 |
| ===============
|
|
| ===============
------------| Users |
2005 Jul 28
3
Routing for multiple uplinks/providers problem.
Been running this for quite a while and noticed that have intermittent
problems getting out.
Find that if I ping the same site from 2 computers it may work on one
and fail on the other.
Also was surprised that some time they are going out different
interfaces at the same time.
Seems to work all the time from the firewall.
Running 2.6.10 kernel with the multipath routing patches on a debian
2007 Apr 28
2
Re: LARTC Digest, Vol 26, Issue 24
Alejandro,
So, i did try the script that you give to me, and the problems its
continues.-
Maybe the problem was in the IPTABLES rules, i attach the complete script
below:
#####################
ifconfig imq0 up
tc qdisc add dev imq0 handle 1: root htb default 30
tc class add dev imq0 parent 1: classid 1:1 htb rate 500kbit ceil 2000kbit
tc class add dev imq0 parent 1:1 classid 1:10 htb rate
2007 Apr 30
1
Maximum number of tc handles?
Hi all,
Can anybody tell me what the maximum number of handles are that I can
use when setting up qdiscs and classes in tc?
Regards,
Leigh
Leigh Sharpe
Network Systems Engineer
Pacific Wireless
Ph +61 3 9584 8966
Mob 0408 009 502
Helpdesk 1300 300 616
email lsharpe@pacificwireless.com.au
web www.pacificwireless.com.au
_______________________________________________
LARTC
2004 Apr 27
4
Real IP behind SNAT
Hi.
I was asked to put a real IP behind a linux router
is doing static NAT for an internal network.
Internet (gateway)
|
|
|
eth0 = real IP
-----------------
L I N U X ROUTER
-----------------
eth1 = private IP
|
|
|
eth0 = real IP
-----------------
Wireless Access Point
-----------------
2007 Apr 26
1
HTB+SFQ
Hi folks,
I`ve a problem to use HTB and SFQ.
The first script, below, to show a simple configuration, does work
fine...!!!
But, in the second example, does not work, becouse i put more code to
clasify the traffic by protocol, http and ftp in this case.
Somebody can tell me the errors?
Thx, in advance.-
NOTICE: IMQ device is to asociate with ETH1 my external iface.
SCRIPT que funciona:
2004 Nov 30
2
iptables & tc - 3 marks
Hi....
Help me please!!!
I am using Linux Redhat as router of the my network. I am to making NAT and firewall.
In my iptables script, I need make 3 MARKs for the same packet, as following
# It marks the packets that will go for link ADSL (I have 2 links - adsl 2Mb and ''dedicate link'' 256Mb )
# I am using ''ip rule / ip route'' to make this
iptables
2005 Jun 17
4
linux ip forwarding problem
Hi,
I have three linux machines, and I want to let one of them forward packets
betwen the other two. The forwarding node has two ethernet cards,
connecting the two two machines respectively. However, when I ping between
the two end points, the forwarding node can receive the ping requests at
its eth0, but it never forwards them to its eth1. So is the reverse
direction.
The forwarding node is
2005 Jul 02
0
Question regarding iptables marks for HTB
Hi,
Currently I´m using the following iptables rule to mark packets in order to
shape traffic:
iptables -A PREROUTING -i eth2 -t mangle -p tcp -s 192.168.1.50/32 -j MARK
--set-mark 50
So my question is, is there a limit in the numbers that can be used as
marks? And also, can only numbers be used as marks?
How about:
iptables -A PREROUTING -i eth2 -t mangle -p tcp -s 192.168.1.50/32 -j MARK
2004 Dec 01
0
Iptables with 3 marks. It is possible?
Hi....
Help me please!!!
I am using Linux Redhat as gateway of the my network to internet. I am to making NAT and firewall.
In my iptables script, I need make 3 MARKs for the same packet, as following
# It marks the packets that will go for link ADSL (I have 2 links - adsl 2Mb and ''dedicate link'' 256Mb )
# I am using ''ip rule / ip route'' to make this
2005 Nov 27
1
shaping outboaud email
Hi,
I thought sending email went out on port 25?
When I look with ethereal, outbound email transfers were on port 58020.
I assume it''s choosing a random port for transfer? If so how do I tag
it with iptables mark?
I was hoping it was as simple as tagging port 25.
Thanks,
Mark
2007 Apr 04
4
Some advanced filtering questions
Hi All,
I need to do some tricky filtering stuff. Can anyone tell me if any of
the following are possible?
* match on a combination of firewall mark AND u32 criteria. ie. handle
6 fw AND u32 match ip src 1.2.3.4/32 - to match packets from 1.2.3.4
which have been marked elsewhere
OR
* to OR the values of u32 matches. Something like u32 match ip src
1.2.3.4/32 OR match ip dst 1.2.3.4/32 - to
2004 Aug 03
2
dns strange problem
Dear Lists.
I use shorewall-14.7 at ReHat-9.0 (2.4.26 with Julian Anastasov Patch)
for quite long, and everything seem work fine.
Untill this morning, i have problem with one rules
ACCEPT
loc:172.16.0.20,172.16.32.20,172.16.0.230,172.16.0.229,172.16.0.231
net udp 53 -
172.16.0.229 and 172.16.0.231 is my mail gateway (DNAT).
DNS server is outside the firewall,
Now, the
2007 May 02
7
tc u32 match !port
How can i redirect all traffic that not come from port 80 to a flow ?
i was thing about some like
tc filter add dev imq1 parent 1: protocol ip prio 7 u32 match ip sport
!80 ......
But this not work.
Another doubt, if i have two rules that intersects , for example ,
one filter with u32 match ip src 10.10.10.10 flowid 1:10
and other with u32 match sport 80 0xffff flowid 1:11 , which one will
2004 May 31
1
skip other iptables marking if packet is already marked
I have many iptables setmark commands, but as soon
as there is one match, I would like to skip all the rest.
How to do this.
-------not-working-not-mark-zero-is-not-accepted---------
iptables -t mangle -A PREROUTING ..... -j MARK --set-mark .....
iptables -t mangle -A PREROUTING -m MARK ! --mark 0 -j ACCEPT
iptables -t mangle -A PREROUTING ..... -j MARK --set-mark .....
iptables -t mangle -A
2005 Sep 21
5
test 1 2 3 4
Second test after big upgrade..
--
http://www.PowerDNS.com Open source, database driven DNS Software
http://netherlabs.nl Open and Closed source services
2005 Oct 11
4
dual-isp incoming traffic problems
I have two ISP connections, and am having some issues. I can connect to
any services on the firewall, like the smtp gateway, but anything on the
internal server only works from one connection. The lartc guide has a
good example for what to do for services on the box, but leaves it open
for how to handle services on an internal host. I''ve tried using
iptables to mark the packets
2005 Apr 19
7
tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works
=== tc filter - based on iptables - MAC fw marking not
working ==
DEV="eth1"
tc qdisc add dev $DEV root handle 1: htb default 20
tc class add dev $DEV parent 1: classid 1:1 htb rate
600kbps ceil 3276800kbit
tc class add dev $DEV parent 1:1 classid 1:15 htb rate
3kbps prio 4
tc class add dev $DEV parent 1:1 classid 1:20 htb rate
500kbps prio 3
tc qdisc add dev $DEV parent 1:15 handle