similar to: disconnecting

Hello everyone, I want an opinion from people who tryed different matching modules to match diferent types of traffic, especially p2p ones. I would like to hear which scales better as CPU usage and latency : ipp2p, iptables-p2p or l7-filter with the p2p patterns. I want to use one of them to block most of p2p (except maybe dc++ and emule which i want to shape). I would use the matching rules in

Hi there, We''re running a small ISP and all the users are shaped to 384/512/768k both ways (whichever package they choose). The router is a linux (debian sarge), the kernel is 2.4.25 right now. All users are getting 10.1.1.* ip addresses (eth1) and eth0 connects to the isp using ethernet (via a media converter, it''s fiber from there). They''re nat''s using

This ''MSN'' is a web site? Im guessing it ''refresh''es every 5 minutes or so. They are proably testing cookies against the ip address they appear to be comming from. This is horribly wreckless of them if they arnt offering IPv6. Are they? They only way i have to remedy this problem is to get their IP range and bind it to the most stable connexion you have,

https://www.p2pwatchdog.com/ > -----Original Message----- > From: lartc-admin@mailman.ds9a.nl > [mailto:lartc-admin@mailman.ds9a.nl] On Behalf Of Roy > Sent: Thursday, September 02, 2004 5:04 AM > To: Ing. Marcos Salvatierra; James Lista > Cc: lartc@mailman.ds9a.nl > Subject: Re: [LARTC] adsl and p2p programs > > This is most asked question but there is no good

I have a linux server running Mandrake 10, with the kernel configured with "CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_MULTIPLE_TABLES=y CONFIG_IP_ROUTE_MULTIPATH=y" options, with 4 ethernet cards: - 2 ethernet used to connect to my lan (eth0=192.168.1.x and eth1=192.168.2.x) - 2 ethernet used to internet connection (2 adsl lines, both with 600/300 kbtis) The two lan are used to share

As suggested on the netfilter list, I''m posting here too: Current network layout: Internet | ----100.100.251.217---- / (router) \ Internet | | | 100.100.251.220 100.100.251.218

Hello all, I am having some difficults to make a routing rule work. I want that every P2P packages go to one interface (eth2 - cheaper link) nad the rest of the traffic go to another interface (eth0 - frame relay very expensive). I am using this script to make the mark and balance: ------- #!/bin/bash IPT="/usr/local/sbin/iptables" IP="/sbin/ip" #---- # Declara redes #----

I thought of creating an htb class for each user, but as you said I haven''t got enough bw to do soo. That’s why my setup only has 5 classes with WRR queues so I get sure each user doesn’t affects the other users. On top of that I have an iplimit to a maximum of 15 parallel connections per user. So I get the following conclusions: A) change link B) upgrade to kernel 2.6 and use l7

Interesante !! lo probaste con 2.4 ? o 2.6 ? -> -----Mensaje original----- -> De: Esteban Ribicic [mailto:esteban@dejawu.com.ar] -> Enviado el: Lunes, 02 de Febrero de 2004 08:11 p.m. -> Para: ''ThE PhP_KiD'' -> Asunto: RE: [LARTC] limiting p2p -> -> -> Probaste layering 7 matching? -> -> -> -----Mensaje original----- -> De:

hello, a friend of mine have this configuration: 10 x PC -- router/linux/rh8 -- ADSL Modem -- ISP let''s say that the bandwidth is: 5M and 800K he does dc++ and counter-strike, so let''s say the UP is full, and the ping from the counter server is 300ms, the server cut the connection, and no more game, the player is unhappy. The normal ping is 50ms. so he thinks to put some

Hello, I am trying to shape p2p trafik to 256kbps on my dsl line. I wrote this set of commands: DEV=eth2 ip link set imq0 up tc qdisc add dev imq0 root handle 1:0 htb default 21 r2q 2 tc class add dev imq0 parent 1:0 classid 1:1 htb rate 530kbit tc class add dev imq0 parent 1:1 classid 1:20 htb rate 530kbit ceil 530kbit prio 0 tc class add dev imq0 parent 1:1 classid 1:21 htb rate 64kbit

Thanks, The only issue here is that for each service I need to create 200 child classes if I have 200 clients... Let me explain the problem better I have the following connection from my ISP: (1024/1024) (rate/ceil) 1) First, I want to divide the 1024 into smaller pieces based on priority: 256/256 - P2P (I want to limit the P2P traffic as much as possible) 256/1024 - HTTP 256/1024 - FTP

Hello, I''m blocking/limiting succesfully all P2P activity on our corporate network using linux/ipp2p/connmark. That is, until now. For my colleagues have found a new p2p client to wreck havoc on our DSL line: ARES/WAREZ It seems to be a gnuttela clone, but different enouph for ipp2p not to identify it. I played around a bit with tcpflow with no success of finding

Having never worked with Linux TC before, I have a few questions about setting it up and am not certain I understand the Howto well enough to do what I specifically want. I have a linux firewall talking to my cable modem, as well as the rest of my network. I have 4 things I''m trying to accomplish, in order of priority: 1) I use a VoIP phone, and want to give it as much bandwidth as

Sir, Thanks for the wondershaper utility! It has improved the response time for my ssh connections to my home server whenever i need to access it from the Internet. However, is there a way to setup a bandwidth, say 10kbits/sec (i only have 128kbits/sec DSL), and assign it to a particular traffic type like kazaa and other P2P file-sharing? This way it will guarantee that my home users of

Hi there, i have some questions regarding CONNMARK and STRING modules for netfilter. I have a stateful firewall doing contraking, because i have two dsl connections doing load balancing. I have found a way to discriminate KaZaA traffic flowing via port 80 from normal HTTP traffic using the string match. I want to mark a kazaa connection and filter ir to a specific qdisc. I have been looking

Hello there, I''m having lots of problems with my setup here. Let me explain: I am network administrator for my university dorm. We are about 300 users, and we have 2 ADSL connections doing load balancing with 300kbits upstream and 2Mbit downstream. The load balancing is working great, we are doing connection tracking so I can mark and hence prioritize interactive traffic and ACKS

Hi All, In a scenario, where a LAN is being provided internet connectivity through multiple ISPs terminated at a Load Balanced Multihomed Linux Router as described in LARTC HowTo, how would the traffic distribution affected if there is a squid based transparent proxy for the LAN''s web traffic on the same system (i.e. the load balanced router itself). The recent squid versions have

Hello, a few days ago I sent an email asking for help with my tc htb rules I''ve got (a script), but I''m not sure if that email got to you... anyway, I''m sending it again along with my htb script and I''ll tell you the problem once again: I have a computer with ip 192.168.0.100 which is acting as a p2p server, so I want to shape traffic coming out from that

Hi, I have a question conercing wondershaper. I''m using the Clarkconnect linux distribution for my linux router and I tried to use wondershaper. On start up of wshaper, there are no errors or any other problems but I''m not sure if it''s running correctly. Only one qdisc / one class is used and when I start an uplink ftp transfer, my ping time is growing up to 1700ms - I