similar to: fwmark filter doesn''t work as expected

Displaying 20 results from an estimated 300 matches similar to: "fwmark filter doesn''t work as expected"

2007 Mar 20
1
TC Filter matching all
Hello! I was always using "default" in HTB to choose default class, but now I need to do it with filters. Tried following command: # tc filter add dev eth0 protocol ip parent 10: prio 2 flowid 10:2 Unknown filter "flowid", hence option "10:2" is unparsable It is from example in LARTC Howto. My question is then - how to make a filter matching all without eating
2006 Apr 12
7
ESFQ not so fair?
Hello! I am using since yesterday ESFQ instead of N HTB queues. It mostly works OK, but when somebody is using one single sesion (for example downloading file via FTP), it gets weird speed. For example it is 20 kilobytes pres second, then drops down to 9, then 20 again, and then slowly to 0 and stops. But when using download accelererator of some kind or bittorrent client which uses many
2005 Dec 17
0
ipt_IPMARK.c should have nfcache removed
Hello! I think 36th line of ipt_MARK which is (*pskb)->nfcache |= NFC_ALTERED; Should be removed. At least looking at that patch: http://lists.netfilter.org/pipermail/netfilter-devel/2005-July/020382.html -- Michał Margula, alchemyx@uznam.net.pl, http://alchemyx.uznam.net.pl/ "W życiu piękne są tylko chwile" [Ryszard Riedel]
2007 Jun 05
3
Multipath routing
Hello! I have trouble with multipath routing. Those options are enabled in kernel: [*] IP: policy routing [*] IP: equal cost multipath [*] IP: equal cost multipath with caching support (EXPERIMENTAL) <*> MULTIPATH: round robin algorithm But issuing: ip r a 1.2.3.0/23 scope global equalize nexthop via 80.245.176.11 \ dev eth0 weight 1 nexthop via 80.245.176.13 dev eth0
2005 Jul 06
2
Classid limit at 10000
Hi I''m setting up shaping using HTB and hashkey. It seems like there is a limit on the number of classid''s at 10000? How can I go higher than 10000? This is what my output say when I reach classid number 10000: ... ... /sbin/tc class add dev eth0 parent 2:6 classid 2:9998 htb prio 5 rate 768kbit ceil 768kbit burst 0 cburst 0 /sbin/tc qdisc add dev eth0 parent 2:9998 handle
2006 Apr 30
1
PPPoe, Bgp
Refering to pppoe i have next problem : I asked my isp if i can buy a class of real ip`s to be routed by them. They said elegantly it can`t be done . I want opinions . I am using an ADSL connection through a Speedtouch 510 configured in bridge. About Bgp : i asked someone if i can peer 2 different locations on 2 different ip`s using private asn number and he said yes , and what i don`t
2007 Mar 08
2
DGD of upstream routers
Hi I have read various info, and mailing list archives, but have not found an answer to the following. I have a few servers with configurations similar to the following: They each have multiple uplinks to the Internet, and a sample config is as follows: eth1 is 192.168.0.1, connected to 192.168.0.2 eth2 is 192.168.1.1, connected to 192.168.1.2 My default route looks like: ip route add scope
2004 Jul 19
2
problem with read.table
Hello R-users, I apologize for my question but I'm a newbie. I want to read a file which columns separator is "\t". At the end of each row there is a "\n" to go to the following line. The three first lines are remarks lines and the fourth contains columns titles ( variables names, ids, dates, calculated values, observed values...) . I do: read.table("myFile",
2007 Jun 11
7
shaping using source IP after NAT
Hi all I am using a pass trhu router and I need to QoS some clients output by its IP address. The problem is that QoS is due after NATing. Is there some clever way of doing this besides MARKing every packet with some IP hashing in POSTROUTING NAT table? Regards Ethy
2007 Sep 24
3
trouble when using IPMARK module
Hello, I am trying to use iptables together with tc I need to use IPMARK module of iptables, but I got a strange error after I run ''iptables -t mangle -A POSTROUTING -o eth0 -j IPMARK --addr=dst --and-mask=0xffff --or-mask=0x1000'' The command is copied from iptables manual itself (of course interface changed) I only got " iptables v1.3.5: Unknown arg
2007 May 17
2
IPCLASSIFY - patch based on IPMARK
Hello everybody! Some time ago I''ve decided that using the MARK property of the Linux IP packet structure for the needs of traffic control is not very useful. So I wrote an iptables patch called IPCLASSIFY. It is fully based on IPMARK but it uses the PRIORITY field instead of MARK. The relation between IPCLASSIFY<->CLASSIFY is the same as IPMARK<->MARK. By using
2007 Apr 24
1
IPMark won''t compile on a vanilla 2.6.20 kernel
Hello, IPMark won''t compile on a vanilla 2.6.20 kernel I obtain this error during the compilation under debian sarge 3.1 CC [M] net/ipv4/netfilter/ipt_TTL.o CC [M] net/ipv4/netfilter/ipt_IPMARK.o net/ipv4/netfilter/ipt_IPMARK.c: In function `target'': net/ipv4/netfilter/ipt_IPMARK.c:37: error: structure has no member named `nfmark''
2003 Sep 18
0
hexadecimal fwmark and fwmark mask
Hi list, I''m new to this list, I just subscribed because I have some ackward about IPRoute2. First, while playing with NetFilter'' "MARK" target, I met a weird behaviour once I tried to use this marks in the RPDB : the packets where successfully marked, but it seemed that RPDB didn''t succed in matching them (for those who already know the answer, I only used
2006 Nov 02
0
src routing and fwmark
Hi, I''ve got 2 lines from two diffrent ISP''s, one is a leased line and another a DSL line, I route certain ips over the DSL line for faster access and would like email to go over the leased line as it has a static ip and is our sending mailserver ip I would like to send mail to the same ips that is routed over DSL via the leased line, otherwise my server gets blacklisted with
2006 Jul 29
1
FWMark routing trouble
Hi everybody, I''m trying to set up routing for 2 links to the internet on a box which produces traffic itself (e.g. DNS) and will route all our local traffic. AS one route is quick and expensive and the other one slow and cheap, I want to be able to route packets for some high-level protocols to the second link. If I correctly understood table 3-2 in
2006 Feb 06
0
ip rule, fwmark, mangle and src IP
I made a script to test if in a moultiple gateway setup all default connection are up, regardless of the fact that that gateway is the default gw. Suppose adsl1 and adsl2 are present, and all traffic goes by default to adsl1, and you want to test if adsl2 is ok. 1. I use mangles from iptables to mark icmp packets to some test machines 2. I set up a routing table for each adsl 3. I use
2005 Oct 30
0
FWMARK ROUTING OVER MULTIPLE ROUTERS/LANS
I would like to route ssh in my network via DSL2 and all other trafic via DSL1. So far I menaged to do it for LAN2 but there are still WLAN1,LAN3 and LAN1 to go. On all routers I added table "pilicka" with rule for fwmark and I fwmarked ssh. # ip rule show 0: from all lookup local 32765: from all fwmark 0x3 lookup pilicka 32766: from all lookup main 32767: from all lookup
2005 Nov 29
0
fwmark port - dual adsl line
Hi all, Below is my network diagram: - eth0 (adsl 1) eth1 (adsl 2) | | | | | | | | ----------------- | | | Gateway | | | ----------------- | | | tun0 Below is my iptables scripting to mark certain ports: -
2005 Jul 01
0
split access & fwmark
Hi, I had a nice router which was able to split my outgoing webtraffic over a dsl line, then I got a power failure and now my settings are lost and I don''t get it to run. I''ve configured a iptable rule like: /sbin/iptables -A PREROUTING -t mangle -i eth1 -s 192.168.1.10 -p TCP --dport 80 -j MARK --set-mark 1 and ip rule add fwmark 1 lookup 10 ip route add default via
2004 Oct 15
0
iproute with fwmark
Hi, not sure if it will work, i''ve 2 leased lines, behind line 1 is a webserver, this server should answer all incomming http requests through leased line 1, the webserver self parses other webserver, this outbound traffic should go over leased line 2. i''ve successfully added fwmark with iproute, but if i set the policy for the webserver to use leased line 2 (for parsing other