similar to: TC-ng questions/problems

Hi all, It is my understanding that with HTB, the rate and the ceiling are divided over the elements of the class. E.g. using a rate of 100 kb and a ceiling of 2000 kb for a class with 10 elements on a 100Mb NIC, the effect of the ceiling will be that if all elements are generating their maximimum possible trafic they will be effectively limited to ~ ceiling / number of elements, in this case

Hi all, The following ingress statement: .... $host2 = SLB(cbs 1024kb, cir 2048kbps); class(<>) if ip_dst == 81.175.84.2 && SLB_else_drop($host2); .... is compiled by TCNG into the folling tc command: ... tc filter add dev eth0 parent ffff:0 protocol all prio 1 u32 match u32 0x51af5402 0xffffffff at 16 classid ffff:0 police index 505 rate 256000bps burst 131072 mpu 0 action

Hi, I want to stop routing for 1 particular host in my network. I thought that this would do it: iptables -D INPUT -d aaa.bbb.ccc.ddd -j DROP iptables -D INPUT -s aaa.bbb.ccc.ddd -j DROP But that still shows traffic. What is the corract way to do that? Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277 fax: 024-3608416 e-mail:

Hi all, I want to apply traffic control using TCNG 1.30 on a NAT router. Can I use the IP addresses on my LAN to shape the traffic on the outgoing interface, with other words, does the address translation take place before or after traffic control? (Or does it depend and if so, on what?) Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277

Hi everybody, I have a network that only uses terminal services. Look at the diagram. 20 machines running WinXP <-> LinuxFW-1 <-> 1Mbit link dedicated fiber link <–> LinuxFW-2 <–> Terminal Server I’d like to give the maximum priority for bandwidth to terminal services (port 3389). I’ve changed the CBQ script from LARTC site to suite my needs, but every time I

Hi all, I get this warning from Asterisk and I want to assess whether it is important, and if so, if I should complain to the telephone manifacturer or start up my programmer's editor: chan_sip.c:5152 handle_response: Host '172.31.1.7' does not implement 'NOTIFY' What does this mean and am I missing some important feature? Groeten, Joost Kraaijeveld Askesis B.V.

Hi, Is it possible to create a routing rule that depends on the source host/network, besides the target host/network? E.g. route everything from 192.168.0.x to 10.0.0.1, and route everything from 192.168.1.x to 10.0.0.1. TIA -- Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277 fax: 024-3608416 web: www.askesis.nl

Hi, I have a router that should do routing between 2 networks for a network *except* if the destination is a private network *and* the source is a specific machine, in which case it has to NAT. I thought that this would do the trick: .... iptables -A POSTROUTING -s 10.20.1.0/24 -d 192.168.0.0/16 -j RETURN iptables -A POSTROUTING -s 10.20.1.1 -o eth1 -j SNAT --to-source 172.16.0.1 .... But

Hi, Are there GUI (preferable) or scripting tools available somewhere that can help me with traffic shaping? I have found MasterShaper and tcng but hey seem both unmaintained. Directly writing scripts is still a bit out of my reach, so I would like to learn by using tools... TIA Joost

Hi, Can anyone point me out where the script below is wrong? All I want is that host 172.31.1.1 can only use 10 megabit. If I run this script on the in-between router nothing happens (the host uses still the full 100 mbit, tested with iperf) , so i assume that something must be wrong.... #!/bin/sh # LAN1 NIC tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1: htb tc class add dev

> After functioning correctly for more than 6 months suddenly > Samba died : the users and usergroups are not recognized > anymore. Restarting the Windows 2000 ADS (mixed mode) server > and/or the Debian Samba server does not help. I even re-added the > server to the domain: > > net rpc join -U Administrator reports a sucessful join. > Active Directory shows the Debian

Hi all, I have 2 questions regarding policing 1. What is the problem with policing as in most mesages I can find people say don''t but I have not found a why? 2. I have the egress below working (numbers in example are bogus, I know). How do I add an ingress policy? /* compile this file with tcc filename > limit.sh and run that file */ dev eth1 { egress { class (

Hi, I have a Debian based NAT router. How can I manage upstream egress bandwidth based on the LAN ipadress in the network below? My goal is that host1 get a minumum of 10Mbit up/down and host2 gets a minimum of 90Mbit up/down, both max 100Mbit up/down? targethost 172.16.255.254 | | 172.16.0.1 natrouter

Hi all, Can someone please help with a tcng setup? I have played with tc and tcng in the past, and now would like to get some serious rules in place. However, I have a difficulty in setting them up. My setup is as follows: One machine working as a firewall: eth0 is the interface connected to a 512K DSL line eth1 is connected to a LAN eth2 is connected to another LAN, a bit like a DMZ eth1 and

Hi, Is it possible to manage bandwidth based on a router macaddress that is between two machines? E.g. dest<-->bandwidth management <-->router<-->source Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277 fax: 024-3608416 e-mail: J.Kraaijeveld@Askesis.nl web: www.askesis.nl

Hi all, I want to create a bridge (see picture below) between 2 LANs with the same IP range (192.168.0.0/24) using 2 wireless links that use load sharing over multiple interfaces (as descibed here: http://lartc.org/howto/lartc.loadshare.html) for load balancing and fault tolerance. Both links should use IPsec for encryption. I have googled for an example that does this but I could not find it.

Hi Thomas, > Try to: > > - stop winbindd > - remove the winbindd_cache.tdb file > - start winbindd again. This did not do it. > If it doesn't help: > - what samba version are you running? > - what errors do you see in the log.winbindd and log.wb* log files? Upgrading from samba_3.0.14a-3 to samba_3.0.14a-3sarge1, and adding winbind separator = + winbind use

Hi, After functioning correctly for more than 6 months suddenly Samba died : the users and usergroups are not recognized anymore. Restarting the Windows 2000 ADS (mixed mode) server and/or the Debian Samba server does not help. I even re-added the server to the domain: net rpc join -U Administrator reports a sucessful join. Active Directory shows the Debian server's computer account wbinfo

Although RAW sockets can be used when specifying the source address of packets (defeating one of the aspects of the jail) some people may find it usefull to use utilities like ping(8) or traceroute(8) from inside jails. Enclosed is a patch I have written which gives you the option of allowing prison-root to create raw sockets inside the prison, so

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible