similar to: shape outgoing/upload traffic PER-IP.

Does anyone know how to make a link redundancy? I have two ADSL lines, and i want the linux machine to be able to switch between the two lines everytime the first ADSL line goes down. Thanks a lot. Cristiano

Hi all. I have a simple question. Is that a way to limit the number os TCP or UDP connection of a single HOST in my network? For exemple: I have a host with IP 192.168.1.202 and he is using edonkey, Kazaa, and Bittorrent at the same time, and he also is infected by a virus that opens more than 500 TCP ports at the same time. So, i want to limit that host to be able to open no more then 30 TCP

Hello all, I need a very simple routing protocol for VPN redundancy. We have several sites and each site has a Linux router and two IPCops each with an ADSL connection to the internet using different ISP''s. I have configured VPN''s between all of the sites for each IPcop on ispA and the same for the IPCops on ispB. This way, if one of the ISP fails, I change the route on the

Hi all. Im having a problem that is driving me crazy. I cant get link fail-over to work in my RedHat9 Linux. I have two ADSL lines exactly the same speed, and im doing NAT with the linux box. Whenever the first line (eth2 in my case) goes down, i run a bash script that i made to change the default route to the backup line (eth0). eth1 is my internal network. I want to be able to make the linux box

Hi all. Im using the following CQB shaper to shape IP addresses: DEV=eth1 (internal eth) tc qdisc del dev $DEV root tc qdisc add dev $DEV root handle 1: cbq avpkt 1000 bandwidth 100mbit tc class add dev $DEV parent 1: classid 1:1 cbq rate 256kbit allot 1500 prio 5 bounded isolated tc class add dev $DEV parent 1: classid 1:2 cbq rate 512kbit allot 1500 prio 5 bounded isolated tc filter add dev

I hope this list is still active. I''m an experienced Linux Sysadmin, but I haven''t done much in the way of routing. Due to a decision made by my higherups, I need to jam a computer between my ISP and my LAN to do bandwidth throttling. My current setup: 1 Crappy Cable Modem (7Mb/768Kb connection) with a static IP. 4 servers (all have static, routable IPs) - One of which is

I have need to use HTB on multiple (5) IPs. The present setup has the DSL connection going to a switch and then each computer with an external IP configures the external interface to listen on that IP. I have had TERRIBLE luck trying to use iptables to DNAT so if DNAT needs to be done, any advice that includes tested and working examples would be sincerely appreciated. There are 3 computers

Hi! By iptables I set marking (-j MARK) just before -j IMQ. There are only three marks. Exectly all of them are ditected to 1:20 Why I see 3 pkts in default 1:30? How explain it? ### imq0: queueing disciplines qdisc htb 1: r2q 10 default 30 direct_packets_stat 0 Sent 631429 bytes 1812 pkts (dropped 0, overlimits 20) ### imq0: traffic classes class htb 1:20 root prio 0 rate 100Kbit ceil

I''ve gotten wondershaper to work in my linux box, which is part of a 3 computer network that shares the same dsl connection. The linuxbox handles most bulk down and uploading, and the other 2 are mainly for surfing and such. What I need from wiondershaper is that it should perform it''s tasks with all of the traffic to the dsl modem, but do nothing with the internal traffic

Hello people: I''m new in the forum. I''ve implemented the script for load balancing of "Linux Advanced Routing & Traffic Control HowTo" and I''ve a question: When I run the next command : "ip route" I get the folowing information: -------------- 192.168.0.32/27 dev eth0 proto kernel scope link src 192.168.0.33 192.168.0.96/27 dev eth2 proto

Is there an other place than www.docum.org where one could get monitor_tc.pl? Docum.org seems to be down. Peter -- The bogosity meter just pegged.

Hi List, New subscriber/lartc user here. Have read the entire lar&tc howto, alexy''s ip_cref, etc. and must say, this makes iptables seem downright *easy*. I''m trying to build a three-legged linux router (WAN/LAN/DMZ) and have had it more or less working with iptables but would like to learn layer2 routing with iproute2. I have an adsl/29 network and would like my

Hi I am very unclear about the wonder shaper and a bit of a novice with Unix all together I have a question for you and I hope you can answer Basically my office is getting a couple of people slowing down the network so ive been looking around and found wondershaper What I want to know is that can I rather than having low priority ports have it with high priority ports And

Hi all, After posting some emails here and googling in the net. I have now a little clarity where and how to start bandwidth Management. Hope I can still be guided though. My understanding is I will be needing these modules and linux utilities. I hope someone can confirm. 1. I need to use iptables/ebtables for packet marking. 2. I can use tc for packet shaping. 3. I can use bwm_ng for

Hi! I''m getting this error while I try to compile iproute2-2.6.11-050330: gcc -D_GNU_SOURCE -O2 -Wstrict-prototypes -Wall -I../include -DRESOLVE_HOSTNAMES -DCONFIG_GACT -DCONFIG_GACT_PROB -c -o q_esfq.o q_esfq.c q_esfq.c: In function `esfq_parse_opt'': q_esfq.c:45: error: structure has no member named `hash_kind'' q_esfq.c:45: error: `TCA_SFQ_HASH_CLASSIC''

Hi, I have some questions about tinc. " *Automatic full mesh routing*Regardless of how you set up the tinc daemons to connect to each other, VPN traffic is always (if possible) sent directly to the destination, without going through intermediate hops. " 1- To have client to client direct connection and don't have traffic through the server should I have port forward at the NAT? Or

Hello one more time, As others seem to already asked without reply, I''m getting lower speed rates than specified via ingress. How do I know. Because I have this in my script: tc qdisc add dev $DEV handle ffff: ingress # Filter intranet traffic, so fit it to intranet speed tc filter add dev $DEV parent ffff: protocol ip prio 10 u32 \ match ip src $Q_2_HOSTS \ match ip dst

The manual says (about prio): > Because it doesn''t actually shape, the same warning as for SFQ holds: > either use it only if your physical link is really full or wrap it > inside a classful qdisc that does shape. The latter holds for almost all > cable modems and DSL devices. I want to wrap prio inside of tbf. Here''s why: I have a server on a DSL line, which has

about tomato firmware... can I install it on a VMware virtual machine? tinc web ui is already included with the last tomato version? king regards, Cristiano. 2015-06-08 16:52 GMT-03:00 Lance Fredrickson <lancethepants at gmail.com>: > On 6/8/2015 11:55 AM, Cristiano Albiero Berni wrote: > > 2- Is there a kind of web interface to manager the server? >> > Tinc itself

Hello, Stephen, List! Attached is the patch for iproute2 to add the possibility to use fwmark in u32 filters. The kernel part was included in 2.6.10. Please apply! Thank you! For more info: - Kernel patch (not needed for 2.6.10): http://kernel.umbrella.ro/net/mark_in_u32/net-match-nfmark-in-u32.patch - Examples: http://kernel.umbrella.ro/net/mark_in_u32/examples.txt --- Catalin(ux aka Dino)