similar to: TCNG syntax for ingress / policing questions

Hi all, The following ingress statement: .... $host2 = SLB(cbs 1024kb, cir 2048kbps); class(<>) if ip_dst == 81.175.84.2 && SLB_else_drop($host2); .... is compiled by TCNG into the folling tc command: ... tc filter add dev eth0 parent ffff:0 protocol all prio 1 u32 match u32 0x51af5402 0xffffffff at 16 classid ffff:0 police index 505 rate 256000bps burst 131072 mpu 0 action

Hi all, I want to apply traffic control using TCNG 1.30 on a NAT router. Can I use the IP addresses on my LAN to shape the traffic on the outgoing interface, with other words, does the address translation take place before or after traffic control? (Or does it depend and if so, on what?) Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277

Hi all, We have 2 class C networks that are connected by a Linux router with the internet. We want to apply traffic control (bandwidth control). For that we wrote the tcc script below. We have 2 problems: 1. To establish a 2 megagit download we must actually set the value to 2500kbps. Is there a possible reason for that? 2. If we enable the WAN device we get very hight ping times (they change

Hi all, I get this warning from Asterisk and I want to assess whether it is important, and if so, if I should complain to the telephone manifacturer or start up my programmer's editor: chan_sip.c:5152 handle_response: Host '172.31.1.7' does not implement 'NOTIFY' What does this mean and am I missing some important feature? Groeten, Joost Kraaijeveld Askesis B.V.

Hi, I want to stop routing for 1 particular host in my network. I thought that this would do it: iptables -D INPUT -d aaa.bbb.ccc.ddd -j DROP iptables -D INPUT -s aaa.bbb.ccc.ddd -j DROP But that still shows traffic. What is the corract way to do that? Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277 fax: 024-3608416 e-mail:

Hi all, It is my understanding that with HTB, the rate and the ceiling are divided over the elements of the class. E.g. using a rate of 100 kb and a ceiling of 2000 kb for a class with 10 elements on a 100Mb NIC, the effect of the ceiling will be that if all elements are generating their maximimum possible trafic they will be effectively limited to ~ ceiling / number of elements, in this case

Hi, I have a Debian based NAT router. How can I manage upstream egress bandwidth based on the LAN ipadress in the network below? My goal is that host1 get a minumum of 10Mbit up/down and host2 gets a minimum of 90Mbit up/down, both max 100Mbit up/down? targethost 172.16.255.254 | | 172.16.0.1 natrouter

Hi, I have a router that should do routing between 2 networks for a network *except* if the destination is a private network *and* the source is a specific machine, in which case it has to NAT. I thought that this would do the trick: .... iptables -A POSTROUTING -s 10.20.1.0/24 -d 192.168.0.0/16 -j RETURN iptables -A POSTROUTING -s 10.20.1.1 -o eth1 -j SNAT --to-source 172.16.0.1 .... But

> After functioning correctly for more than 6 months suddenly > Samba died : the users and usergroups are not recognized > anymore. Restarting the Windows 2000 ADS (mixed mode) server > and/or the Debian Samba server does not help. I even re-added the > server to the domain: > > net rpc join -U Administrator reports a sucessful join. > Active Directory shows the Debian

Hi, Is it possible to create a routing rule that depends on the source host/network, besides the target host/network? E.g. route everything from 192.168.0.x to 10.0.0.1, and route everything from 192.168.1.x to 10.0.0.1. TIA -- Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277 fax: 024-3608416 web: www.askesis.nl

Hi, Is it possible to manage bandwidth based on a router macaddress that is between two machines? E.g. dest<-->bandwidth management <-->router<-->source Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277 fax: 024-3608416 e-mail: J.Kraaijeveld@Askesis.nl web: www.askesis.nl

Hi all, I want to create a bridge (see picture below) between 2 LANs with the same IP range (192.168.0.0/24) using 2 wireless links that use load sharing over multiple interfaces (as descibed here: http://lartc.org/howto/lartc.loadshare.html) for load balancing and fault tolerance. Both links should use IPsec for encryption. I have googled for an example that does this but I could not find it.

Hi Thomas, > Try to: > > - stop winbindd > - remove the winbindd_cache.tdb file > - start winbindd again. This did not do it. > If it doesn't help: > - what samba version are you running? > - what errors do you see in the log.winbindd and log.wb* log files? Upgrading from samba_3.0.14a-3 to samba_3.0.14a-3sarge1, and adding winbind separator = + winbind use

Hi, After functioning correctly for more than 6 months suddenly Samba died : the users and usergroups are not recognized anymore. Restarting the Windows 2000 ADS (mixed mode) server and/or the Debian Samba server does not help. I even re-added the server to the domain: net rpc join -U Administrator reports a sucessful join. Active Directory shows the Debian server's computer account wbinfo

Is it possible to detect if a link is down in a TEQL device, so that I will receive a mail on such occasion? TIA -- Groeten, Joost Kraaijeveld Askesis B.V. Molukkenstraat 14 6524NB Nijmegen tel: 024-3888063 / 06-51855277 fax: 024-3608416 web: www.askesis.nl

Hi, Can anyone point me out where the script below is wrong? All I want is that host 172.31.1.1 can only use 10 megabit. If I run this script on the in-between router nothing happens (the host uses still the full 100 mbit, tested with iperf) , so i assume that something must be wrong.... #!/bin/sh # LAN1 NIC tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1: htb tc class add dev

Hello everybody on the list, I have the following situation where I want to police the speed of incoming packets from specific subnets to 1024kbps and then police all the rest to 256kbps, which is the speed my ISP grants for the rest of the internet. So, eth1 is the one connected to the cable modem and then to the internet. I do: tc qdisc add dev eth1 ingress handle ffff: then: tc filter

Hi everybody, I have a network that only uses terminal services. Look at the diagram. 20 machines running WinXP <-> LinuxFW-1 <-> 1Mbit link dedicated fiber link <–> LinuxFW-2 <–> Terminal Server I’d like to give the maximum priority for bandwidth to terminal services (port 3389). I’ve changed the CBQ script from LARTC site to suite my needs, but every time I

Hi, Are there GUI (preferable) or scripting tools available somewhere that can help me with traffic shaping? I have found MasterShaper and tcng but hey seem both unmaintained. Directly writing scripts is still a bit out of my reach, so I would like to learn by using tools... TIA Joost

Hi all I started playing with tcng to generate my tc rules, but I have some difficulty implementing my rules... The script below generates an error: # Device eth0 tc qdisc add dev eth0 ingress beginner.tc:2: don''t know how to build meter for this The script is below, I changed the real IP numbers for XXs and YYs, since it doesn''t really matter what they are. eth0 is the