similar to: Help? Router/Bandwidth throttle needed.

Not normally a question for this group, but you guys are very bridge/router/firewall savvy, so I thought I''d toss it here. I have a bridge. On one side of the bridge is that fancy thing called the Internet. On the other side is my LAN. The bridge is the obvious demarcation line and a good place to put a firewall. Now, I have all my iptables stuff planned out, EXCEPT for nat. The

Hello Shorewall gurus, I have a dilemma with a public server. I want to migrate the current public server over to a new machine behind the current server''s firewall (shorewall 1.4). I have included a diagram below to help explain the target network I am working toward. I have read the shorewall online documentation and though I have used Shorewall the past 4 years in the current

Hello All, I was recently fighting with an optimum online connection in NY. I finally got in touch with someone that confirmed they are throttling my upload connection. I just wanted to make everyone aware of it, so if you have problems if your ping times jump erratically, this could be the cause. Their suggestions were, although you can upload a lot, do not do it constantly. They do not want

If you have a working proxyARP setup, will you please post it? I''ve tried to insert a Linux box between the DSL connection and the switch, but I''m getting nowhere. Everything works correctly when all the servers in this network use the switch to get to the DSL. Any box directly connected to the DSL also works correctly. http://www.sjdjweis.com/linux/proxyarp/ makes it sound

My needs is limiting the outbound traffic of an smtp mail server. It is connected to a gateway via 100Mbit ethernet. I want limits its outbound traffic to max 3 Mbit. I have read lot of docs and tried various script without great results. Any simplest solutions? TIA. Regards, B.

Hi everyone, I have a question regarding the default gateway for hosts on DMZ zone. I moved servers from parallel to the DMZ (outside the firewall, directly connected to I-net) to inside DMZ. The default gw for these servers was the DSL router(bridge) of my ISP. What should be the default gw (for the hosts inside the DMZ), when hosts are inside the DMZ now - still the DSL router (external

Hi, i''ve got traffic shaping up an running perfectly for outgoing connections. Now i also want to control the incoming traffic rate on mein linux gentoo box. is there any possibity for doing this without dropping packages. for example delaying ACKs or something like this. im running a patched 2.6.14 kernel with iproute 20050310-r1 any suggestions? regards Uwe

Can''t get proxy arp with arp -s <IPaddr> <MACaddr> pub to work with a 2.4 kernel. I see some evidence in the archive that this was broken in the 2.0.x timeframe and never fixed. Anyone know for sure if it''s broken or working ? (I''m attempting to route a few addresses into a routed network, from the ethernet side of a DSL router that has a /29 public

Hello list, I''m having a little trouble imagining a setup I''ll soon have. I am in the process of getting a routed /28 to my homeLAN. What I want to do is to put a linux box in front of the lan to filter some of the unneeded and potential dangerous ports. Now the box has 2 nics, one for the inside one for the outside. How should I go on to setup those NICs when a) the PCs in

Hello I am having a hard time with users using POP while leaving mailboxes of several gigabyte cumulated. This causes a lot of disk I/O and kills performancs for everyone. I try to encourage people migrating to IMAP, but that migration will take some time, and therefore I am looking for alterantive ways to workaround the problem. I found pop3-throttle-plugin.c, which seems a smart way to solve

Hi I am very unclear about the wonder shaper and a bit of a novice with Unix all together I have a question for you and I hope you can answer Basically my office is getting a couple of people slowing down the network so ive been looking around and found wondershaper What I want to know is that can I rather than having low priority ports have it with high priority ports And

Hi Everyone, This is a simple question but I don''t understand why the below tbf is not working as expected by throttling traffic to 5kbps If I throttle a PC''s traffic using the below when traffic exceeds 5kbps packets start getting dropped (as they should) but all traffic gets dropped. not just the bit over 5kbps. TC="tc add dev ppp0" $TC parent 8001:2 handle 2:

Hi List, New subscriber/lartc user here. Have read the entire lar&tc howto, alexy''s ip_cref, etc. and must say, this makes iptables seem downright *easy*. I''m trying to build a three-legged linux router (WAN/LAN/DMZ) and have had it more or less working with iptables but would like to learn layer2 routing with iproute2. I have an adsl/29 network and would like my

All, Is anyone using iptables (recent module), or any other alternatives, to throttle the number of new imap or pop connections per minute? We have some applications that like to login every second to pull mail using imap, so we'd like to protect the entire dovecot server from these applications. We've already made the change over to high-perf mode, but we still need some type of denial

I have two interfaces, eth0 and eth1 but i can''t discern the egress traffic than ingress traffic. I need to apply htb qdisc in both directions, and I read that I need the IMQ patch to do this, because in ingress qdisc i can''t apply htb qdisc...but where is the ingress qdisc? affect the traffic that goes from eth0 to eth1 or is for the traffic that goes from eth1 to eth0?

I''ve gotten wondershaper to work in my linux box, which is part of a 3 computer network that shares the same dsl connection. The linuxbox handles most bulk down and uploading, and the other 2 are mainly for surfing and such. What I need from wiondershaper is that it should perform it''s tasks with all of the traffic to the dsl modem, but do nothing with the internal traffic

In an effert move my Dmz from a snapqear roouter to Linux with shorewall. Question is I have network 64.42.53.200/29 which makes default gw 64.42.53.201 network 64.42.53.200 broadcast 64.42.53.207 mask 255.255.255.248 and I want to set up shorewall with eth0 64.42.53.202 eth1 local eth2 dmz where dmz will use say 64.42.53.203 for web and email server. Where I do not need or should I say use

Hi zfs-discuss, I have some questions about throttling on ZFS 1) I know that throttling is activating while one sync is waiting for another. (http://blogs.sun.com/roller/page/roch?entry=the_dynamics_of_zfs) Is it possible to throttle only selected processes (e.g. nfsd) ? 2) How can I obtain some statistics about it? I want to know how often throttling is activating on my host etc. 3) Is it

I know this will be trivial for most, but I am having trouble with getting my scenario to work correctly. I want to ''tag'' and ''throttle'' the bandwidth to and from a particular client on my lan side. Better yet, I just want to throttle smtp traffic, per say, for that ip. ----lan----------eth1-[linux.box]-eth0----------internet I have used the technique

Well FWbuilder is NOT easy. The documentation does not match the current GUI. Now the box is locked up. I will have to pull it again, hook it up to a kybd/VGA and reset iptables.... Maybe Shoreline with webmin.... Problem is I want a REAL router/firewall with little work. Both public and private nets have routable addresses. No NATing for me! I just help write the RFC ;) And all the