similar to: Example on using fwmark with masks. Please help!!

I recompiled yet 2.6.19.1 kernel (using iptables with the same patches too). The configuration for this test is: 1) linux box with 2.6.19.1 kernel (SMP machine) with these patches/modules: a) l7-filter b) ipp2p c) connlimit d) set 2) 4 ethernet interfaces: a) 2 external (eth1 and eth3) interfaces with balanced links (as described in nato-howto) bridged as wan0

Hi, I have a suspicious problem with multiple uplinks configuration. First of all my configuration: 1) kernel 2.6.20.3 2) iptables 1.3.7 3) last iproute (for masked marks) All wan interfaces are bridged (stp disabled) in only one interface (wan0), all lan interfaces are bridged (stp enabled) in only one interface (zlan0). The wan0 bridge is to allow UPnP works. To allow related

Hi all! After that good thread "DGD patch not detecting dead gateway" I was able to set up a Load Balancing with ping based DGD (without Julian Anastasov patch). But now I''m facing a new problem and tried some options, with only partial solutions. I made a script based on http://www.mail-archive.com/lartc@mailman.ds9a.nl/msg16257.html (Thank you Manish Kathuria),

The situation is this: INTERNET -- ROUTER -- ETHERNET+WIFI -- PC's The conection between INTERNET and ROUTER is done with 2 LINKs with static IP's. The conection between ROUTER and PC's is done via ETHERNET lan with many bridges and ACCESSPOINTS. The PC's are in a IP subnet, the BRIDGES in another IP subnet, the AP's in another IP subnet. The ROUTER has 1 bridge interface

Hi all, I have a strange setup I am trying to get working. Initally I thought I could set it up by just setting up the correct routes. However after thinking about it I have convinced myself (maybe incorrectly) that I most likely need some sort of advanced NAT/routing setup. Below is a description of the networks involved: Local net (192.168.101.0/24) | | Linux machine eth1

I''m converting my network from a "one interface per segment" to a "single connection with vlans", well, some hardware I have requires using different vlan IDs. suffice it to say I need bridges to connect a few different vlans that should all be one but can''t be because of firmware constraints. so my first step is to get shorewall to know about bridges.

I'm having trouble figuring out how to make a bridge that does not block forwarding of packets when there is no receive channel in the same bridge. The reason I want to do this is that the return path is via another circuit. The two directions are on two different radios. I would think this would be like the response given to someone in July 2007 about setting a "hub" mode by

IMHO, i believe that it would be more realistic to have one router providing load balancing/dead gateway to one/several subnet(s). otherwise, each server/user would have to do their own load balancing for each subnet! that, or you would need 3 routers, one for each subnet and a linux router doing the load balancing in the middle. with 3 routers, the load balancing configurations

Hi, I''m having a problem with filtering marked packet with tc. I''m trying to run this: /sbin/tc filter add dev imq0 parent 1:0 protocol ip prio 8 handle 0x7/0x000f fw classid 1:8 But the response is: Illegal "handle" Typing the handle without masked mark is working, but I have a configuration were I need 2 mark types and I''m using masks: Multiple

Opps! After reading the email below I noticed something in ''ifconfig''. The wireless interface is ''wlan0'' not ''wan0''. I modified the wireless interface in /etc/shorewall/interface to wlan0 started shorewall I can connect eo the INTERNET with shorewall running Horace From: Horace Franklin Jr

Hi, I''m implementing a linux router with this characteristics: - Multiple adsl with each public ip''s - Multiple LAN ethernets (in a bridge). - Linux IGD I have successfully implemented de 2 first steps, the adsl balanced fine (multipath routing), and the clients bridge fine. My problem is how to use that with linux-igd. My LAN bridge has STP and is implemented for

hi, i wann to make multigateway routing and i read ur how to on http://lartc.org/howto/lartc.rpdb.multiple-links.html and create some rules which i am sending u, but with this rules i am not able to do multigateway routing on my linux router so plz help me out. thanks the rules are given below IF0=eth0 IF1=eth1 IF2=eth2 IP1=192.168.1.2 IP2=61.246.243.86 P1=192.168.1.1 P2=61.246.243.81

As some e-mails ago, I'm trying to play beryl in my laptop. I successfully configured my xorg.conf (thanks to the comunity for the help that allowed me that). The problem: When I boot the laptop without external LCD/CRT, beryl is working fine, but when I boot it with the external, it recognice fine the external LCD and don't want to allow beryl run. What beryl says: === BEGIN === $

Hi, I''m looking for info about IFB devices and how I can use it to incomming traffic shapping. Has IFB any web about it? Do any body known where I can find more info about it? I found this: http://linux-net.osdl.org/index.php/IFB But I can''t stand fine how to use it to allow many ifb''s devices or how to use it with "tc actions". Any help? Thanks --

Hi list, I''m new to this list, I just subscribed because I have some ackward about IPRoute2. First, while playing with NetFilter'' "MARK" target, I met a weird behaviour once I tried to use this marks in the RPDB : the packets where successfully marked, but it seemed that RPDB didn''t succed in matching them (for those who already know the answer, I only used

Hello, I''m trying to setup an 8 port wan configuration (pptp+pppoe) with one vlan trunk. My internal networks are : LAN(eth9): 10.0.0.0/16 VLAN10(eth9) 10.10.0.0/24 VLAN20(eth9) 10.20.0.0/24 VLAN30(eth9) 10.30.0.0/24 VLAN100(eth9) 10.100.0.0/24 I would like to post my configuration here since i don''t success to do the following: 1. Communicate between VLANxx to LAN

Hi! I would like to thank very much for this great page with Kernel Packet Traveling Diagram and to suggest small update concerning IMQ. I think the sentence: "IMQ in input comes before nat so IMQ does not know the real ip address. Ingress comes after nat, so ingress knows the real ip address." could be more precise like that: "By default IMQ in PREROUTING comes before nat and

On new CentOS 5.2 installation (and ugradation before config the diferent programs I use), I'm having problems with Thunderbird 2.0.0.17. Problem 1: I configured my e-mail account (as I have in my old machine) and I have no access to my pop3 and/or smtp servers. I write my user for the access, but thunderbird no ask my password anytime. Problem 2: I installed lightning, but I can't add

After upgrade my laptop, I discovered a low performance on it. The laptop is a 2,73GHz Intel centrino and from some kernels versions to now, it had a good performance, the cpu scaling worked fine. Now, I discover that forcing in /etc/sysconfig/cpuspeed the governors and/or max/min speeds, it don't want to run more quickly. The laptop boots fine with the correct speed (usual speed), but when

I''m having trouble routing on high fwmarks, I want to use a lot of different marks for 2 routes so that I can QoS based on the marks ip rule looks like this: 0: from all lookup local 32751: from all fwmark 31 lookup dslout 32752: from all fwmark 30 lookup dslout 32753: from all fwmark 29 lookup dslout 32754: from all fwmark 28 lookup dslout 32755: from