similar to: Does weight route and nat make sense ?

Does anyone know if load balancing and DNAT work well together? I know that load balancing and NAT do not, but what about a simple port forward? I can''t apply Julian Anastasov''s patches, because they don''t work with PPTP patches. :/ Anyhow, a simple: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport xxx -j DNAT --to yyy:xxx iptables -I FORWARD -i eth0 -d yyy -p

lartc-request@mail man.ds9a.nl To: lartc@mailman.ds9a.nl Sent by: cc: lartc-bounces@mail Subject: LARTC Digest, Vol 20, Issue 13

I have tried using iptraf for my NAT firewall to analyse the IP traffic. Basically I am faced with this difficulty of related the source IP to the outgoing interface to the internet, so I am wondering if anyone has a suggestion for a different ways to do it, or a suggestion for a better tool. Details :- Supposed : eth0 - LAN eth1 - WAN1 eth2 - WAN2 And then

The LARTC howto correctly describes load balancing and split access for traffic from a machine with multiple ISP connections (http://www.lartc.org/lartc.html#LARTC.RPDB.MULTIPLE-LINKS) -- *provided* the traffic originates from the machine itself (i.e. traffic regularly handled by the INPUT and OUTPUT chains of iptables). When forwarding traffic from an attached local network, the following

Hi ....... I need your help.. I use pcanywhere and samba server 2.2.8. I have test the config with testparm and the ip from the client. But with file transfer from pcanywhere i can't copy directly file on the server because pcanywhere want to have a passwort.. I can't explain this because with normal windows copy it is working fine without password. i hope that someone can help me.

Dear All Please be informed that I checked for the presence of internal modem on my CentOS server , as the followings : #dmesg |grep -i modem #lspci |grep -i modem #lshw |grep -i modem According to the output , it seems that my CentOS client does not contain internal modem . So I decided to add external USB modem and make use of an PCAnyWhere like application that enables for Remote PC Access .

Hello my name is Jared Skinner. I don't know about any of you but my only hurdle to overcome that inhibits my switching totally to Linux is pcanywhere. My job requires me to use it and believe me I have tried to sway them to VNC. Does anyone have a howto on how to get it to work via wine??? If so I would greatly appreciate knowing where I can get it. Thanks in advance Jared

Assuming if I have rules matching the same packet, the one chosen is the lower preference value or the high ? For example # ip rule list .... 100 from 192.168.1.0/24 lookup main 200 from all fwmark 5 lookup first ..... Packet is matching both rules, the one with priority/preference 100 or 200 is selected ? _______________________________________________ LARTC mailing list /

This problem is driving nuts, so I am seeking help here. Your help will be deeply appreciated. I have made myself a Linux bridge with eth1 and eth0 to form br0. Then I run a script to configure tc with htb on it. But I can never match non-icmp traffic ( such as tcp and udp ) with TOS or DSCP values such as 0x68. The full story as follows :- 1. On the source testing machine, I do this to set

Subject almost says it all, I wonder if there is a way for me to use iptables matches like l7 and/or ipp2p match in a bridge ( one ethernet in and one ethernet out ) ? Regards.

Normally when we talk about traffic control, we are talking about doing traffic control (tc) using a router, ie packets into an interface and based on routing, they goes out to somewhere else. However I have a box with two interfaces, eth0 and eth1 added to a bridge br0 and I would like to perform traffic control via the two interfaces. Is that supposed to work the same as the router

I''m getting insane here. I''m running shorewall 1.3.11 with iptables 1.2.5 and freeswan 1.97 on a 2.4.18-8 kernel aka MNF. The setup is a followed: Lan (192.168.1.x) - FW (eth1 192.168.1.254 - eth0 64.x.y.71) - router 64.x.y.65 (which is default GW on eth0) -internet - 161.a.b.c (FW-1) So a windows client with checkpoint tries to connect to a vpn-1 server on the internet. The

I have a requirement which I guess it is not too unusually, however I haven''t quite figured out how to do it and couldn''t find any examples which handle that. I have made myself a Linux-based bridge, eth0 bridged with eth1 to form br0. In this bridge, I run ''tc'' script to handle QoS. So far nothing unusual. However, what''s different is that this

This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --8323328-465625440-1002298640=:29463 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Content-ID: <Pine.LNX.4.33.0110051717531.29463@localhost> ---------- Forwarded message ----------

As you are probably aware, this is a ever green topic. I have personally tried doing it, testing it and verifying it and I am myself finding this problem challenging and frustrating. Most of the scripts will recommend some form of rate limiting ( or policing ) on the download. But the challenge is how to determine the correct value for the policing ? Lot of the recommendation says use x %

hi there, I just wanted to share a recent discovery I did on how to setup a secure VPN implementation for linux 2.4.x (I''m using 2.4.20 but it should be working, as far as documentation states, for > 2.4.18) without using FreeS/WAN. The tool (ipsec_tunnel: http://ringstrom.mine.nu/ipsec_tunnel/, by Tobias Ringström) is a kernel module based on ipip and ip_gre. It uses CyptoAPI to

463 Best Soft for the accessible prices!!! 732 304 MS Windows XP Professional - $ 80 536 660 Microsoft Office 2003 Professional - $ 120 393 556 Adobe Photoshop 8.0 - $

Norton Internet Security Pro 2004 - 40.00 Microsoft Office 2003 Professional Edition - 110.00 3D Home Architect Landscape Design Deluxe 6.0 - 29.99 Corel Draw Graphics Suite 11 - 120.00 Microsoft Money 2004 Standard - 20.00 Corel Draw Graphics Suite 11 - 120.00 Easy CD & DVD Creator 6 - 29.99 Adobe InCopy CS - 60.00 Symantec pcANYWHERE 11.0 - 80.00 Quark Express 6.0 - 60.00 Visual Studio.Net

hi I am working on IPv4 equal cost multipath with caching support on 2.6.12 kernel. I have successfully created multipath route by command :- /sbin/ip route add 10.200.0.0/16 scope global equalize \ nexthop dev eth0 weight 1 \ nexthop dev eth1 weight 1 But I can not specify multipath algorithm, e.g. : round robin algorithm or random algorithm. Can anybody please suggest me correct command or

Hi, I have a linux system which is router between several subnets (each also a different segment), in total 3 different lans, 2 dmz, and 4 internet connections, my default FORWARD policy is DROP, here is a simplified example of my config with only two lan segments and internet connection: Allow forwarding between lans -A FORWARD -s lan1/mask -j ACCEPT -A FORWARD -d lan1/mask -j ACCEPT -A