similar to: LARTC Wiki

Hi I believe that whole question is in topic. Is there any way to recognize ( and then shape ) p2p traffic which is encrypted? Modern p2p clients have this ability moreover some of them have this enabled by default. Now I''m using ipp2p for iptables but as I know this doesn''t recognize encrypted traffic. Thanks in advance. Pozdrawiam Szymon Turkiewicz

Hello list. I''ve configured a very simple script to slow down packets coming from a particular IP Address. I''ve used IPTABLES to mark traffic coming from this IP Address, but it does not appear to be working as expected. Let me first describe my system as maybe what I''m doing is beyond what NETFILTER can do. I have one machine that runs all my servers as

Sir, I have one 2 MB link which I have to distribute to 200 people. Caching may enchance performance. Kindly suggest packages for this purpose under GPL. Regards, Rayudu. _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Hi, my company have just bought new network and I have question about one problem. As in topic we must use few completely different dsl''s and balance traffic between them. 2M/0,5M 4Mb/0,5M 8M/0,5M M=Mb/s I''ve never done such thing before so I have doubts how it will work. If the links are symmetric 2/2 4/4 8/8 there is no problem because with weights I can compensate the

Hi, I''m trying to divide my bandwidth between different services, but I''d like to take into account the number of active users. For example, l want divide my bandwidth between HTTP and SMTP and guarantee HTTP 80% of the bandwidth. However, I have many users on my system (tens of thousands) and if only 1% of my active users are using HTTP (and the other 99% SMTP), I''d

After varying degrees of success with p2p detection modules, I would like to write the following rules using iptables to reliably identify p2p traffic: 1. If a host on the network has 5 or more simutaneous tcp connections to ports above 1024, mark all connections to ports 1024 and above as 60. 2. If a host has received (or sent) UDP packets from 5 different hosts'' ports above 1024 in a

On Fri, 2015-06-26 at 09:40 -0600, Shawn Heisey wrote: > On 6/26/2015 5:48 AM, Andrew Beverley wrote: > > I'm configuring some Sieve scripts for virtual users. I'd like to keep > > the Sieve scripts somewhere "sensible". > > > > Currently, all the mail goes into /var/mail/vhosts/<domain>/<mailbox> > > > > So I thought a good

Hi All , My first message and I have a little problem with my FC6 box trying to block emule traffic using layer7 . Here my network : Internet --------- ADSL Router ------------------- FC6 Box -------------------- Emule Box external ADSL : Dynamic Internal ADSL : 192.168.254.1 external FC6 : 192.168.254.3 internal FC6 : 192.168.253.1 Emule Box : 192.168.253.3 I guess that everything

# iptables -t mangle -A POSTROUTING -m mark --mark ! 0 -j ACCEPT iptables v1.3.3: Bad MARK value `!'' I''m puzzled, what''s wrong with this syntax? kernel is 2.6.15.7-ubuntu1 Thanks Francesco

Hi all !!! I have a firewall bridge (not router) with two nics that filter p2p with ipp2p. All works fine but now I need to add a third nic to route all p2p traffic through this nic. It is that possible with a bridge ? Later (with other server) connect to this nic I do loading balancing with two adsl lines to route all p2p traffic. Any hint ? Any howto ? Thanks in advance. roberto --

Hi, Just a question, the rate values use for configure a class, are they a IP rate or a Ethernet rate ? Thanks, Edouard. _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

I''m pretty smart, and was once regarded as pretty network and computer savvy. But the world has obviously passed me by! I have a server in a colocation facility, and I was recently hit by a bill for overage; I used more bandwidth than I expected, and I must pay. So now, I want to bother with packet shaping on the server. The *most* important thing is to clamp bandwidth to the 1Mbps

Hi to all I am studying HTB on LARTC how to. I realize a simple configuration on router: tc qdisc add dev eth0 root handle 1: htb default 30 tc class add dev eth0 parent 1: classid 1:1 htb rate 3mbit burst 15k tc class add dev eth0 parent 1:1 classid 1:10 htb rate 2mbit burst 15k tc class add dev eth0 parent 1:1 classid 1:20 htb rate 1mbit burst 15k tc qdisc add dev eth0 parent 1:10 handle 10: sfq

I have tried using iptraf for my NAT firewall to analyse the IP traffic. Basically I am faced with this difficulty of related the source IP to the outgoing interface to the internet, so I am wondering if anyone has a suggestion for a different ways to do it, or a suggestion for a better tool. Details :- Supposed : eth0 - LAN eth1 - WAN1 eth2 - WAN2 And then

Hello all, Can anyone recommend a good book which thoroughly explains QoS from a Linux perspective? Something with TC examples & the like. I''ve looked at the following: http://www.amazon.com/gp/product/1580533418/qid=1148368189/sr=1-2/ref=sr_1_2/102-2819973-6353768?s=books&v=glance&n=283155 Engineering Internet QoS. Thanks.

I am trying to create my own Token Bucket Filter. However, I have a problem with packet dropping. Scenario : I got two streams 20KB/s each. I got one bucket with rate 20KB/s I put both streams into this bucket. When buffer is full packets need to be dropped. The problem is that only every other packet needs to be dropped in this scenario. Streams are the same so queue looks like that : S1 |

I have two adsl lines on my linux firewall box and i want to do some load balance between them...i tried a lot of different things, but it isn´t working...Following the instructions of http://lartc.org/howto/lartc.rpdb.multiple-links.html i used the configuration above. using "iptraf" I can see some few packets using the ppp1 connection, but almost all the packets use ppp0 connection.

Hi all I am using a pass trhu router and I need to QoS some clients output by its IP address. The problem is that QoS is due after NATing. Is there some clever way of doing this besides MARKing every packet with some IP hashing in POSTROUTING NAT table? Regards Ethy

I have a Cable ''modem'' that has a problem that many of these devices is bound to have. I was wondering what other lartc user thought about this and if DSL has simular problems. Cable, being Asymetrical, is able to upload at a given rate and hopefully has a buffer, in the modem, of some kind. When I nc(netcat) to a UDP echo, or discard, server I get about 10Mbps out on my

Hi guys, i have a little doubt ; I have eth0 ethernet and eth1 wireless , and they are bridged in br0 Is there any difference in the behavior between do tc qdisc add dev br0 root sfq OR tc qdisc add dev eth0 root sfq && tc qdisc add dev eth1 root sfq -- []''s Salatiel "O maior prazer do inteligente é bancar o idiota diante de um idiota que banca o