Displaying 20 results from an estimated 1000 matches similar to: "ftp connmark"
2007 May 09
10
Load balancing using connmark
Hi,
I''ve been implementing a load balancing solution using CONNMARK, based
on solution described by Luciano Ruete at [1]. Gracias por el post y por
apuntar en la dirección correcta Luciano!
Once implemented, I''ve found that due to some reason packets aren''t
properly marked (or improperly remarked) and sent out using the wrong
interface.
My topo setup is:
2003 Oct 03
0
Re: LARTC digest, Vol 1 #1392 - 4 msgs
Здравствуйте lartc-request,
Friday, October 03, 2003, 8:44:37 AM, you wrote:
lrmdn> Send LARTC mailing list submissions to
lrmdn> lartc@mailman.ds9a.nl
lrmdn> To subscribe or unsubscribe via the World Wide Web, visit
lrmdn> http://mailman.ds9a.nl/mailman/listinfo/lartc
lrmdn> or, via email, send a message with subject or body ''help'' to
lrmdn>
2004 Sep 24
2
CONNMARK problem
Hello everybody.
i have the folowing problem:
i have this in the top of PREROUTING chain in mangle table
iptables -t mangle -A PREROUTING -j CONNMARK --set-mark 0 # rule 1
iptables -t mangle -A PREROUTING -m connmark --mark 5 # rule 2
iptables -t mangle -A PREROUTING -m connmark --mark 6 # rule 3
i think when packet is passing trough my POSTROUTING in mangle table
2007 May 10
0
FW: Load balancing using connmark
-----Original Message-----
From: Salim S I [mailto:salim.si@cipherium.com.tw]
Sent: Thursday, May 10, 2007 5:22 PM
To: ''Francis Brosnan Blazquez''
Subject: RE: [LARTC] Load balancing using connmark
"I think the main advantage of shorewall solution is that it applies
connmark to incoming packets from the wan as you point, leaving load
balancing to outgoing connections to the
2005 Dec 05
1
Connmark question
I am trying to get IPP2P working on my router. Thus far I can see
connections being marked (see below), but they don''t seem to get saved
or something. When looking at /proc/net/ip_conntrack, nothing has
anything other than 0 for mark. The iptables commands for this are:
iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark
iptables -t mangle -A PREROUTING -m mark ! --mark 0 -j
2003 Jun 16
3
Questions regarding CONNMARK
Hi there, i have some questions regarding CONNMARK and STRING modules for
netfilter.
I have a stateful firewall doing contraking, because i have two dsl
connections doing load balancing. I have found a way to discriminate KaZaA
traffic flowing via port 80 from normal HTTP traffic using the string match.
I want to mark a kazaa connection and filter ir to a specific qdisc.
I have been looking
2009 May 29
5
CONNMARK target and connmark match support in Ubuntu kernel
Hi,
as per the shorewall MultiISP documentation ( http://www1.shorewall.net/MultiISP.html
), it says
"Use of this feature requires that your kernel and iptables include
CONNMARK target and connmark match support (Warning: Standard Debian™
and Ubuntu™ kernels are lacking that support!)."
it means MultiISP wont work properly if i am using Ubuntu server. if
yes whats the
2017 Mar 10
4
[Bug 1128] New: ip6_tables connmark or connlabel never matches
https://bugzilla.netfilter.org/show_bug.cgi?id=1128
Bug ID: 1128
Summary: ip6_tables connmark or connlabel never matches
Product: netfilter/iptables
Version: unspecified
Hardware: x86_64
OS: SuSE Linux
Status: NEW
Severity: normal
Priority: P5
Component: ip6_tables (kernel)
2007 May 14
13
Multihome load balancing - kernel vs netfilter
Hi,
I have searched the archives on the topic, and it seems that the list
gurus favor load balancing to be done in the kernel as opposed to other
means. I have been using a home-grown approach, which splits traffic
based on `-m statistic --mode random --probability X`, then CONNMARKs
the individual connections and the kernel happily routes them. I
understand that for > 2 links it will become
2004 Jul 07
1
connmark+connbytes
Hello!
Maybe someone needs connmark and connbytes working together?
See attached file compatible with pom-ng-20040621 (I called it
connmarkbytes :)).
Kind Regards,
Tomasz Chilinski
2007 Aug 04
3
CONNMARK and CentOS4
Hi All,
It''s an old problem and still isn''t fixed :( I need the connection
marking support to enable the triplet of ISP''s we use. However, I
downloaded the latest 2.6.22.1 kernel, made an RPM and installed it. I
see the following kernel modules (which looks promising):
/lib/modules/2.6.22.1/kernel/net/netfilter
xt_connmark.ko
xt_CONNMARK.ko
Which yields the
2007 Jun 11
24
multiple routing tables for internal router programs
Maybe a strange request, I''ll try to explain this as clearer as I can
(forgive my bad english, please :-) ).
I''m setting a linux box as a router. My router uses multiple routing
tables, so I can address the traffic from specific ip addresses of my
lan to distinct ISPs providers (specifying a different default gateway
fo r each table), marking packets with iptables
2007 Oct 18
4
exporting service on multiple wan
Hi all,
I''ve a routing problem. I''m setting up a router based on debian (kernel
2.4).
I need to setup routing to export an ftp service (ftp server is in dmz)
to 2 wan (both).
I setup prerouting ad forward rule with no problem.
The problem is that reply packet use default gateway (default wan) even
though they are enter using the other wan.
I solved it marking packets in input
2005 Jun 22
3
block p2p: ARES
Hi....
I''m trying to setup a LAN router with P2P filter
but the problem is that can''t "catch" Ares.
There is a way to DROP "ares" p2p packets ?
I''ve tried with last "ipp2p" snapshot without sucess...
I''ve
Kernel 2.4.28
iptables 1.3.0
Various Patches from patch-o-matic-ng-20040621
iproute2-ss020116
IMQ Patch
Esfq Patch
2006 Sep 20
0
Ipp2p with connmark
Hi,
I want to classify with ipp2p packets that I''ve captured with tcpdump.
I send the packets with tcpreply.
I had to create a bridge interface in order to enable the listening
interface in promiscous mode
and to classify the traffic mirrored to that.
In this mode the traffic pass through the prerouting chain of the mangle
table (on bridge).
I want to used connmark for recognized flows,
2014 Aug 07
2
[Bug 968] New: CONNMARK failing open silently?
https://bugzilla.netfilter.org/show_bug.cgi?id=968
Summary: CONNMARK failing open silently?
Product: netfilter/iptables
Version: unspecified
Platform: x86_64
OS/Version: Ubuntu
Status: NEW
Severity: normal
Priority: P5
Component: nf_conntrack
AssignedTo: netfilter-buglog at lists.netfilter.org
2005 Dec 09
0
Use of CONNMARK in Multiple Internet Links
What are the pros and cons of using CONNMARK along with the Multiple ISP
Links and Load Balancing method as suggested in the HOWTO and with
Julian''s patches for Dead Gateway Detection ? I have been observing
excellent results without the CONNMARK rules. How is the performance
affected if CONNMARK is used ?
Thanks,
Manish
2008 Apr 11
0
Is iptables -j CONNMARK not available in CentOS4??
Hi,
I'm running CentOS 4 with most of the latest updates, but am having trouble
with iptables and the CONNMARK target. Is it available in the CentOS 4
kernel?
Running on i386:
kernel: 2.6.9-67.0.4.ELsmp
iptables: v1.2.11
# iptables -t mangle -A PREROUTING -j CONNMARK --set-mark 1
iptables: No chain/target/match by that name
I see I do have the CONNMARK lib in
2011 May 16
0
Netfilter connmark module libxt_statistic.so
Hello Everyone, I'm making an load balance ,on output packages IP from
my firewall to Internet, with netfilter connmark and statistic match
modules. it's necessary those two modules togethers to do the load
balance on connection state.
well I'm using CentOS 5.6 and I've searching on Internet but haven't
found any package RPM that.this package come with iptables 1.4.x
version
2006 Feb 06
2
p2p marking, again
Hey, one more question for ipp2p
iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK
--restore-mark
iptables -t mangle -A DSL-IN -p tcp -m mark ! --mark 0 -j ACCEPT
iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j MARK --set-mark 7
iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK --save-mark
iptables -t mangle -A DSL-IN -p udp -m ipp2p --ipp2p -j MARK