similar to: traffic shaping a box with vpn tunnels.

I see that this openvpn rule has been modified to no longer attach the ":port" part to "[undef]" -- probably to reflect a recent change in openvpn. Unfortunately, the rule no longer matches in etch, thus breaking the backport. Here's a patch to match both versions. Signed-off-by: Fr?d?ric Bri?re <fbriere at fbriere.net> --- rulefiles/linux/ignore.d.server/openvpn

Hi folks, I have three network cards on my Slackware box and eth0 and eth1 are for two Internet connections. They have imq0 and imq1. All traffic shaping works fine. Internal eth2 does no traffic shaping. But recently I have put two OpenVPN tunnels (tun devices) and both work via eth0. So my question is - how to shape the traffic on these tun0 and tun1 devices? Thanks Remus

Hi! I read http://mailman.ds9a.nl/pipermail/lartc/2002q4/006244.html and I did that. Can anyone tell me if there is something else to do for shapeing over tunnels to work? I noticed that gre interfaces don''t have a queue attached. I''m running linux-2.6.15 and iptables-1.3.4 with no patches. Thank you in advance, Sorin.

Hi! I have successfully set up traffic shaping at our site using your and others howtos. I have a linux firewall (gateway), two leased lines. I shape only the incoming traffix now. I use HTB+SFQ and sort the packets using iptables with the CLASSIFY patch. It works very well. eth1----ISP2-\ eth2----ISP1--LINUX--internal network eth0 My problem is, that i can not shape my VPN (PPTP)

Hi! I want to add to my previous post that: my setup looks like this internet --> linux router with NAT and tc ==> gre tunnel ==> forwarding router --> LAN At my NATting router I can "see" the forwarded LAN (192.168.2.0/24). Now let''s say that there is a LAN workstation with the IP 192.168.2.18 and I filter the traffic with tc for it. If the fowarding router has

I have a server, server A, with three NICs: two to the Internet via separate ADSL modems, and one to the LAN. The two ''net'' interfaces are configured as described at http://www.shorewall.net/MultiISP.html. This has been working for a number of months. I am now testing an OpenVPN link between server A and another (currently single-ISP) server (server B). I can establish the VPN

hey friends, I have installed OpenVPN 2.0.7 (i386-redhat-linux-gnu [SSL] [LZO] [EPOLL] built on Apr 29 2006) on Centos4.0 through rpm (diag repository). The network scenario of my office is below Remote Client ----> Internet <-------> Cisco Pix Firewall (Gateway) <----> VPN Server & LAN Clients

hi who can ever help me out with the shaping of torrent traffic? i have a pptp at ppp0 over eth0 (10.0.0.1/8) i would like to shape outgoing traffic of rtorrent on these two interfaces, assume rtorrent is running at port 6999 need 3mbit for ppp0 and 50mbit for eth0 i supposed: [tcclasses] ppp0 1 2mbit 3mbit 1 eth0 2 20mbit 50mbit 2 [tcrules] 1 0.0.0.0/0 0.0.0.0/0 tcp

On 04/04/2016 12:11 PM, Jussi Hirvi wrote: > This made me google around a little, and I found some good info here. > They, too, kind of recommend openvpn. > http://www.howtogeek.com/211329/which-is-the-best-vpn-protocol-pptp-vs.-openvpn-vs.-l2tpipsec-vs.-sstp/ > This is not good information. In brief: "There are some concerns that the NSA could have weakened the standard,

On Wed, Apr 28, 2010 at 4:19 PM, zerlgi <zerlgi at gmail.com> wrote: > ?Probably the easiest VPN to set up, but not terribly secure, is VTun. > > If you use (horrors) PPTP, then windows already has a client for it. > .. openVPN also has a nice Windows client that can be run as a service > at startup or called on demand. > .. openVPN supports multiple tunnels (one per .cfg

Hi, I''m trying to use Shorewall (3.0.6) to accomplish what I thought was going to be fairly simple. Unfortunately, I can''t get the dmz to work correctly, and I''m getting martians logged against the interface at issue. Any help I could get would be greatly appreciated! A picture of my physical setup is attached. I have also attached a shorewall dump. To make a long

I couldn''t find anyone who had actually made it work via google so I guess I''ll ask here. My setup is a VPN point to point link. The VPN is a modified version of Openvpn where I''m using zlib compression to improve the compression a bit. The goal is to shape traffic coming from a routing server through the vpn to the endpoint of the vpn and in such a way maximize the

Hello all, I am providing broadband service through DVB circuit. I have 4KB uplink and 32KB downlink. I want to share 32KB downlink bandwidth among 192.168.0.0/24 (20 users in this subnet i.e 192.168.0.2-192.168.0.22)subnet where each user will get 2KB to 6KB bandwidth. And from 4KB uplink bandwidth each users will get only 1KB to 2KB bandwidth.

Looking for some advise from the experts out there. We do simple traffice shaping and I''m having trouble figuring out how to shape vpn traffic using a tc filter. The following filter works fine for SSH tc filter add dev eth2 parent 1:0 protocol ip u32 match ip sport 22 0xffff classid 1:10 The following throws and "Illegal match" error when trying to filter GRE traffic. tc

hi all, i have a classic net topology with two local zone, a firewall/router with dsl connection loc1 (192.168.11.0/24) ----- fw ----- net loc2 (192.168.12.0/24) now on the local zone 1 (on a WinXP machine) i have installed OpenVPN 2.x to make a test connection with a company. OpenVPN is configured as client to use tun on udp port 10000 with ip 10.0.0.2, on the other

I''ve just discovered that I do not have access to the remote gateways for a set of IPsec tunnels to remote networks. This prevents me from changing the routing table on those gateways. I need "roadwarrior" systems connecting to me local network using OpenVPN (tun) to be able to access those systems. Since the remote gateways don''t know about 10.100.1.0/24, where my

Hi, I had some performance problems with TINC running on Windows XP. I had a VPN tunnel running over a wireless network to a Linux VPN server. Web browsing through the tunnel was a pain. Big web pages with lots of pictures loaded very slow compared to a plain network connection. When the VPN client was running on a Linux computer, and a Windows computer was browsing the web through the VPN

I''m looking for a way to shape all traffic on a virtual vlan interface, say eth1.100 to a max of 100mbit. The box is a quagga router with eth0 on the inside and vlan interfaces on the eth1 card to our upstream partners. Each partner has his own vlan on eth1. I tried shaping but was only able to shape outbound traffic on the eth1.100 interface. Inbound shaping was also possible, but

Hi All, I am working on a mystery. I am using openvpn-2.1_beta7-gui-1.0.3-install on all the computers in question. All computers are running XP-Pro-SP2. (Mine is running in a virtual window -- details below.) This configuration works perfectly from my office. I use it to call five facilities: remote aa.bb.cc.dd port 5030 proto udp dev tap ifconfig 192.168.240.30 255.255.255.0 secret

Dear list, I am having a problem with openvpn. I have the following arrangement, running two instances of openvpn on "home fw". I want to protect my WLAN in back of the home fw and that works fine. I can see "Peer connection initiated with 192.168.1.3:5000" in daemon.log on homefw. Nothing gets initiated with officefw, nor can I ping the other end of the tunnel at officefw.