similar to: Port forwarding/translation control

Our system has potentially a few thousand firewall rules and HTB classes. I need to find out the amount of memory these things consume: - iptables firewall rules - HTB classes If anyone has any easy links to this information, that would be great. Failing that, a pointer to a good place to look in the source code would be very helpful. _______________________________________________

Hello, for the umpteen time Patrick Turley <pturley@rocksteady.com> sent: > <eom> Too bad this wasn''t on the, then I could set by watch to it. Steve _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

I recently suffer badly from low bandwith. At first I thought it was my Linux box, but after tracing the problem it turns out it was the ammount of double posts I get from Patrick Turley... :) Isn''t there a way to block mail.rocksteady.com? It seems the mail originates from 10.50.23.3, and is forwarded by this host (which would make sense). Greetz -- Jurrie

is there anybody who can tell me how to forward request to other host, i would like to forward all dns requests to other dns server and it must be done with packet forwarding because dns server (resolver) must go down. There is many docs about port forwarding based on nat table and explanation consider linux box act like nat with two e cards. thanks, alens

Perhaps someone with a sharper brain than I can solve this little mystery. I've Googled until I'm blue in the face, read all TFM's I can find, and tried several iptables rule combinations but just can't get the following to work. Here's my challenge: I have a CentOS-5.3 "main" server with a static public IP address running Apache, OpenVPN, and a bunch of other

All, I have a simple question and a complicated reason for asking: Is it possible to change asterisk's source port for outbound IAX2 connections? I've tried using "sourceaddress" to no avail. I can set it to: proper.ip.of.box:4569 or 0.0.0.0:4569 and it works as expected. But if I try to set it to: proper.ip.of.box:5000 or 0.0.0.0:5000 it fails around line 8536 in

Hello, running unhide ( unhide-20130526-1.el7.x86_64 ) on CentOS 7 i get sometimes messages like: Found HIDDEN PID: 30784 Cmdline: "<none>" Executable: "<no link>" "<none> ... maybe a transitory process" On a second unhide run immediately after it, the process seems to have vanished. Also, i do not see anything about it in /proc, and rkhunter

Hello again, In discussing my proposed patches for supporting alignment assumptions (for supporting __builtin_assume_aligned; see http://lists.cs.uiuc.edu/pipermail/llvm-commits/Week-of-Mon-20121126/157659.html), Chandler and I have started discussing an infrastructure for declaring invariants in the IR for use by the optimizer. The basic idea is to introduce a new intrinsic: void

14 KB/s now. Yesterday 40 KB/s. Is that transitory or there is no enough bandwidth on llvm.org?

I just realized that I hadn''t actually asked a question when I posted this before. Let me try again... I am trying to configure a Linux box with all possible VLANs (4094 of them), and a subnet on each VLAN. Creating the VLANs isn''t a problem. But, when I try to use "ip addr add ..." commands to assign an IP address to each VLAN interface, I get to do about 280 of

On Thu, Sep 06, 2018 at 02:06:37PM -0400, Adam Tauno Williams wrote: > > Attempting to lookup why rsyslogd is listening on the high port > UDP/51427. Have not succeeded in what this port is used for and what > directive controls what interface it binds to. > > [root at bedrock ~]# netstat --listen --inet --program --numeric | grep syslog > udp??0??0

Hi all, I have a newbie question: If I have a function with the following documentation: ca.jo(x, type = c("eigen", "trace"), ecdet = c("none", "const", "trend"), K = 2, spec=c("longrun", "transitory"), season = NULL, dumvar = NULL) Let's take "type" as an example... if I omit this parameter when calling the

Hello I'm using CentOS Linux release 7.3.1611 (Core) with kernel 3.10.0-514.16.1.el7.x86_64 Using iperf for bond benchmarking, and opening several sockets, I noticed a strange behavior. My Centos using iperf as a client to connect to an iperf server (running either CentOS or Debian) requesting N parallel TCP connections. I notice that the local ephemeral ports used are not consecutive and

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, i tried to contact some people on IRC and via e-mail about the Lartc Howto, but since i wasn''t able to get a reply, i try on the list, i hope it''s fine. I need to translate about a half of the LARTC howto in Italian, because of a presentation and class i have to teach about traffic shaping and advanced routing under Linux; i

Hi, I'd like to bring this up again as there has been discussion about 2.4.0 patches. Getting something this big in would probably delay the release too much, but something similar should be considered for 2.5 then. A lot of people would like some control over port forwarding. Florian Weimer's patches (http://cert.uni-stuttgart.de/files/openssh/) are one, rather "big"

Hi, I'm looking for the best way to include an external decision mechanism into OpenSSH, which allows it to restrict port forwarding only to destination ports which are defined in a special external control file for the authenticated session. The authenticated ssh user should only be allowed to connect to this dedicated port to tunnel a VNC session through ssh. So the server side has to

I am seeing a lot of messages like this on my console and in /var/log/messages: Feb 9 19:27:55 rnsa kernel: htb: class 20001 isn''t work conserving ?! The class it''s referring to is the only subclass of an HTB qdisc. Can anyone tell me why HTB would complain in this way? If I understand correctly, HTB isn''t a work-conserving qdisc anyway.

Hi all, The following ingress statement: .... $host2 = SLB(cbs 1024kb, cir 2048kbps); class(<>) if ip_dst == 81.175.84.2 && SLB_else_drop($host2); .... is compiled by TCNG into the folling tc command: ... tc filter add dev eth0 parent ffff:0 protocol all prio 1 u32 match u32 0x51af5402 0xffffffff at 16 classid ffff:0 police index 505 rate 256000bps burst 131072 mpu 0 action

ngoonee wrote: > > vitamin wrote: > > > > ngoonee wrote: > > > Well, why does my WM know about other wine apps but not e-sword? > > > > Popup, tooltip, and like windows (most windows without caption) are created as unmanaged. It all depends on what kind of windows program is using. > > > I don't think e-sword is an unmanaged window. It has a

Hi, I am trying to estimate a VECM without constant using the following code: data(finland) sjf <- finland sjf.reg<-ca.jo(sjf, type = c("eigen"), ecdet = c("none"), K = 2,spec=c("transitory"), season = NULL, dumvar = NULL) cajools(sjf.reg) While the cointegration test does not use a constant, it is used in the cajools which I do not want. I am sure I am