similar to: Interface not marked down when links are down

Hi I want to block the IP traffic between any 2 hosts on a switched ethernet LAN. Will setting all the possible IP addresses on a linux machine in the LAN do the trick or there is another easier solution? -- Anton Glinkov network administrator _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO:

Currently I have a setup that involves connections from several different providers ranging from 6 mbit DSL''s to 10 mbit fractional DS3 connections tied together to provide multipath high availability internet in our area for schools and businesses. We recently extended our coverage to another area which has several other ISP''s. The box that is doing multiwan right now is the

Hello, I have configured a load balancing router using Julian''s patches and as described in "nano.txt" for two ISP links as shown below. ISP 1 ISP 2 . . | | | | | | | WAN

Hi, I''ve setup quagga on a shorewall firewall server. The only purpose for this is to use BGP to connect to a "peering platform" supplied by our data centre supplier. There are some very large ISP''s (and other various providers including google) on this peering platform and connecting to it will speed up access to/from our services and hosted servers. The physical

I have three ADSL lines that I''d like to use as one big pipe to the internet. The ADSL service works by establishing a pppoe connection (the ADSL "modem" is a bridge), and each pppoe interface gets its own IP address. This means I''d have to have 4 ethernet interfaces (3 for each of the ADSL modems and 1 for the LAN) in my gateway. I''d setup the gateway to NAT

http://www.uniras.gov.uk/vuls/2004/236929/index.htm ----Quote---- "The impact of this vulnerability varies by vendor and application, but in some deployment scenarios it is rated critical. Please see the vendor section below for further information. Alternatively contact your vendor for product specific information. If exploited, the vulnerability could allow an attacker to create a

Hello list, I''m having a little trouble imagining a setup I''ll soon have. I am in the process of getting a routed /28 to my homeLAN. What I want to do is to put a linux box in front of the lan to filter some of the unneeded and potential dangerous ports. Now the box has 2 nics, one for the inside one for the outside. How should I go on to setup those NICs when a) the PCs in

Hello! I have trouble with multipath routing. Those options are enabled in kernel: [*] IP: policy routing [*] IP: equal cost multipath [*] IP: equal cost multipath with caching support (EXPERIMENTAL) <*> MULTIPATH: round robin algorithm But issuing: ip r a 1.2.3.0/23 scope global equalize nexthop via 80.245.176.11 \ dev eth0 weight 1 nexthop via 80.245.176.13 dev eth0

I have a private lan that is connected to the world via 3 dsl lines. I put up a linux box that handles all the dsl lines, lan gateway and all is working well...until...one of the dsl lines goes down. My routing table is: x.x.x.x dev ppp0 proto kernel scope link src x.x.x.x x.x.x.x dev ppp1 proto kernel scope link src x.x.x.x x.x.x.x dev ppp2 proto kernel scope link src x.x.x.x

Hello, does anybody know if quagga for CentOS 5.3 is compiled with -enable-multipath? I want to implement ECMP over 2 ISP. Thanks, Cristi Carstea

Hi, I am new to the Linux Advance Routing Project and to Policy Based Routing as implemented in Linux.... but I have been using Linux for 10 years so not _really_ a newbie.... Looking at the lartc.org website I came across the reference implementation of a traffic shaper... I also have Matt Marsh''s book on ''Policy Based Routing using Linux'' which covers traffic

I have 2 CentOS servers that are both authoritative DNS for several domains and local resolvers. As configured, they are publicly visible resolvers, which I've known for awhile is not a good thing. whats the appropriate way of configuring the bind on CentOS 5.current to not allow recursion on queries from the public side, but still allow recursion locally? is it as simple as adding

Greetings to all, To start I’ll firstly lay down the foundation to what I have done so far and if those of you on the list can provide further insight, tips, links etc. This scenario consists of 2 firewalls (both running Debian “etch”), 2 Cisco routers (unsure of model numbers) connected together like so in the diagram below. ----------------------- | Uplink Provider |

hi all, i have been able to find only a trickle of information concerning possible strategies for a 2 adsl setup using two different isp''s. has anyone had experience in the usa or elsewhere working with their providers to carry bgp tables, or would you recommend/implement a round-robin arrangement? how ? :-) yours sincerely christopher cuse, rhce/ccna ccuse@tiscali.fr redhat 8.0

This is an idea from FreeSWAN, which was implemented in the recently released version 1.0. Basically the idea is that FreeSWAN sites automatically encrypt traffic between them when possible, without having to set up the link ahead of time. How this works is: The sites publish some info in DNS. FreeSWAN gets some traffic destined for that site. - looks up the info in DNS - if the info is there:

Hello, I want to share/split bandwidth on a link with unknown bandwidth. I want to exactly share/split bandwidth (for example : FTP 30% , HTTP 20% or 30% for a group of PCs and so forth.) "Traffic-Control-HOWTO" talk that PRIO scheduler is an ideal match for "Handling a link with a variable (or unknown) bandwidth". But PRIO scheduler can not exactly share/split

Hi! This problem gave me quite a headache tonight... I more or less have this source directory: hop@krautesel:/var/tmp$ ls -laR from/ from/: total 12 drwxrwxr-x 3 hop hop 4096 Feb 8 03:34 . drwxrwxrwt 6 root root 4096 Feb 8 03:34 .. drwxrwxr-x 2 hop hop 4096 Feb 8 03:18 CVS -rw-rw-r-- 1 hop hop 0 Feb 8

Hi, I am currently using a 2.4 kernel with multipath routing patch v5 to send outgoing packets in a 1:1 ratio over two lines, however the lines do not actually have equal upstream bandwidth, one has 800kbit and the other 600kbit, so ideally I would like to send packets in a 4:3 ratio, is there anything in 2.6 or a patch for 2.4 that could be used to do that? I tried this ugly hack but it

Greetings, I want to setup bandwidth restrictions for a few clients that use openvpn to connect to my server. I''m using iptables to mark the packets in the mangle table (PRE/POSTROUTING) on eth0 before they get sent via the tunnel. Will the mark survive even if the packets then get routed via an openvpn tunnel (tunX) out the box or does openvpn change it removing the mark ? damnit,

I have looked through the archives, and I can''t find the answer(not that it isn''t there) I have two connections to the net. I want load balancing and redundancy. cable adsl (24.141.) (64.229) | | | | | | | | ------------ | linux | |redhat 7.0| I have no idea were to even start. I would like equal access to both connections.