similar to: dual-isp incoming traffic problems

I have a working router (thanks to Julian''s patches and the threads on this site) load balancing over Dual ISP''s. Links for the curious (see router setup below as well) - Necessary Patches - http://www.ssi.bg/~ja/ How to Patch (I use Debian Sarge and downloaded the latest source from kernel.org) - http://www.desktop-linux.net/debkernel.htm Necessary Reading -

In wireless networks it can be handy to shape by packet rate rather than bytes/s (because capacity is packet-rate-limited). Has anyone done any work on packet-rate shaping ? Thanks.

I have read everything I can find in the docs and faqs about this, and I feel there must just be some simple thing I''m not doing, but I''m stumped. Two interfaces, eth0 and eth1.  eth1 is the WAN connection to the upstream provider, and has a single IP and the default gateway.  Connection uses bgp. eth0 is the LAN interface, and has multiple IP addresses, private (ie., 10.0.2.x)

Been running this for quite a while and noticed that have intermittent problems getting out. Find that if I ping the same site from 2 computers it may work on one and fail on the other. Also was surprised that some time they are going out different interfaces at the same time. Seems to work all the time from the firewall. Running 2.6.10 kernel with the multipath routing patches on a debian

We have a client that wants to bond 2 DSL circuits instead of getting a T-1 (or similar) at their office to run their VoIP traffic on. We came across this Multihomed Gateway (MH200): http://www.cyberpathinc.com/mh200/details.htm Does anybody think this would work if installed at the client location handling NAT for 10 Cisco 7960's and connecting to our public asterisk server? My concern

I''m currently building a firewall for a network with 2 ISP links. Unfortunately, one of the ISP''s doesn''t support BGP yet, otherwise I would be doing load balancing at the router, instead of the firewall. I''ve been trying to find information on how to get WonderShaper working, but everything I''ve found talks about setting it up for a firewall with one

I''m grappling with a problem that looks like sfq is not working (packets don''t get fairly queued, they appear to be always sent FIFO). My configuration appears to be correct. The machine is running quite an old kernel and if I could convince myself that the sfq code it has is just broken, I''d spend the time to upgrade it. Is there any way to inspect or dump the sfq hash

Just to clarify, I'm looking at this from an application layer Point of View. One of the reasons why I'm looking at it that way, is because Tim said he was looking at LinuxHA..."application level" redundancy that uses IP. Tim, just to let you know, I don't believe that LinuxHA will work in the way you described, only because of the different IP ranges. It looks like Linux

Objective: All web traffic originating from my proxy server should be forwarded through interface eth2 instead of the default eth0. The reply should take the same path back to the proxy server. Problem: On the return bout, the kernel doesn''t pass the packet to the higher layers. The reply seems to be getting tossed away between PREROUTING and INPUT Netfilter chains.

Hi. I was asked to put a real IP behind a linux router is doing static NAT for an internal network. Internet (gateway) | | | eth0 = real IP ----------------- L I N U X ROUTER ----------------- eth1 = private IP | | | eth0 = real IP ----------------- Wireless Access Point -----------------

I have some problem with traffic shaping on debian testing. I actually posted a full config on the list a while ago but didn''t get any answers. The problem is that traffic doesn''t get into the user classes (~150) when I associate a class with a qdisc. I tried sfq, fifo but none works. If I dont''t associate a qdisc with a class classification occurs well.

Hello! I have trouble with multipath routing. Those options are enabled in kernel: [*] IP: policy routing [*] IP: equal cost multipath [*] IP: equal cost multipath with caching support (EXPERIMENTAL) <*> MULTIPATH: round robin algorithm But issuing: ip r a 1.2.3.0/23 scope global equalize nexthop via 80.245.176.11 \ dev eth0 weight 1 nexthop via 80.245.176.13 dev eth0

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=554 ------- Additional Comments From fhagur@gmail.com 2007-04-17 05:04 MET ------- I have been wondering about this bug and had similar problems myself here in my Debian system, linux-kernel 2.6.18 iptables 1.3.6. I too saw that some packets became transmitted illegally through the ppp0 interface, when they just shoudn't. What I

http://www.uniras.gov.uk/vuls/2004/236929/index.htm ----Quote---- "The impact of this vulnerability varies by vendor and application, but in some deployment scenarios it is rated critical. Please see the vendor section below for further information. Alternatively contact your vendor for product specific information. If exploited, the vulnerability could allow an attacker to create a

Can''t get proxy arp with arp -s <IPaddr> <MACaddr> pub to work with a 2.4 kernel. I see some evidence in the archive that this was broken in the 2.0.x timeframe and never fixed. Anyone know for sure if it''s broken or working ? (I''m attempting to route a few addresses into a routed network, from the ethernet side of a DSL router that has a /29 public

We currently have a backup site at a different location to our main site. This backup site mirrors (as closely as possible) our main services, particularly web serving. Is there a way to have the backup site act as a failover for the main site using something like Linux-HA? They are on seperate internet connections with different IP ranges. Thanks -- Tim Edwards

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:06.tcpdump Security Advisory The FreeBSD Project Topic: Buffer overflow in tcpdump(1) Category: contrib Module: tcpdump Announced:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:06.tcpdump Security Advisory The FreeBSD Project Topic: Buffer overflow in tcpdump(1) Category: contrib Module: tcpdump Announced:

I have only been on the list a short while today, but mostly see winbind questions...is there a definitive how-to for winbind and maybe faq? Seems we need some better documentation with everyone having questions/problems... Dan

This is very strange. I have 2 DC's (different locations) that have the samba smb.conf (change in workgroup/netbios name). One network/DC works just fine. On the other setup, We can login to the local machine, map drives over as the user, all looks good. We then join the domain, and that works fine. Then when you reboot the windows box, you can't login to the domain because it gives