similar to: Multiple police rates

I´d like to limit input traffic from 2 subnets. Ex. 128Kbps for the two subnets: 10.0.0.0/24 10.0.1.0/24 Like: tc filter add dev eth3 parent ffff: protocol ip prio 5 u32 match ip src 10.0.0.0/24 ; 10.0.1.0/24 police rate 128kbit burst 10k drop flowid :1 Obviously this command did not work because tc does not accept two subnets as src separeted by ";". Is there a way of doing this ?

I''m having problems using shorewall webmin module and Redirect rules. Webmin module does NOT accept the symbol ! in the field "Destination address for DNAT or REDIRECT". So the example that comes in rule file to redirect www from local zone to 3128 port can only be included manualy. The example suggest to exclude the fw ip addres " !192.168.2.2 " Shorewall version:

Hi stef and all I want measure the policy perfomance for video traffic on mpls diffserv network. there are two different polices for video packet 1. Video packets that are marked that are over the limit are to be rejected at the edge router. 2. Video packets that are marked that are over the limit are to be downgraded as best effort and are sent through. Before video enter my mpls

I would like to test police in ingress. I use kernel 2.4.20. I use this configuration: iptables -t mangle -A PREROUTING -i eth0 -s 10.31.12.2 -d 10.31.11.2 -p udp --dport 1001 -j MARK --set-mark 1 iptables -t mangle -A PREROUTING -i eth0 -s 10.31.12.2 -d 10.31.11.2 -p udp --dport 1002 -j MARK --set-mark 2 iptables -t mangle -A PREROUTING -i eth0 -s 10.31.12.2 -d 10.31.11.2 -p udp --dport 1003 -j

Hi, I''m trying to police ingress traffic based on port numbers and IP addresses. The u32 match based on IP addresses seems to work without issues and I''m am able to police incoming packets. However, the same isn''t working with u32 matches based on TCP port numbers. For port numbers, I added exactly one ''u32 match'' rule: common for both: # tc qdisc add

I have a 2.6.12(ubuntu-patchset), kernel recompiled with this routing options: [*] IP: advanced router [*] IP: policy routing [*] IP: equal cost multipath Load balancing is working great, but i have problems whits long term tcp flows (like msn-messenger or vpns or any other type of long term ip based conection). I assume this is because after a period of time, the per-host

Hi. I''m using the following filter from lartc "ultimate PPP" example: tc filter add dev $DEV parent ffff: protocol ip prio 50 u32 match ip src \ 0.0.0.0/0 police rate ${DOWNLINK}kbit burst 10k drop flowid :1 It works fine, but when I remove the "burst 10k", I receive the following error: "burst" requires "rate". Illegal "police"

Hi, What is the difference between the rate values you specify in "tc class ... htb ... rate ..." and in "tc filter ... police ... rate ..."? Thanks in advance. Best regards. -- Value your freedom, or you will lose it, teaches history. ``Don''t bother us with politics,'''' respond those who don''t want to learn. -- Richard M. Stallman

Hello list! In am stuck in getting the wondershaper script working. The last line of the script (tc filter add dev eth0 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 1800kbit burst 10k drop flowid :1) produces the following error: RTNETLINK answers: Invalid argument Could somebody please give me a hint on how to fix this? Regards, borghart

>From CNET news: Belgium cracks down on file swapping By The Associated Press Special to CNET News.com February 15, 2001, 3:20 p.m. PT BRUSSELS, Belgium--Acting on complaints from the music industry, police have raided the homes of people who use music-sharing Web sites, looking for evidence they infringed copyright rules, the prosecutors' office said Thursday. Police searched the home

My gateway is showing these messages: htb*g j=4929 htb*r7 m=0 htb*r6 m=0 htb*r5 m=0 htb*r4 m=0 htb*r3 m=0 htb*r2 m=0 htb*r1 m=0 htb*r0 m=0 HTB: quantum of class 10001 is big. Consider r2q change. What does it means ? Thanks, Luciano Lima _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO:

On Tue, 22 Feb 2011 11:15:39 +0100 "PIOTREK H." <komarekmz@tlen.pl> wrote: > Welcome > > I have a problem with the new iproute "iproute2-2.6.37.tar.bz2 07-Jan-2011 9:18 (the problem from version 2010 to 2011). > Three problems: > a) with filters for UDP traffic > problem affects only the queuing traffic to the machine on which you work qos > In the case

in order to minimize the police of the title of my graph i tried to use: >title("nombre de fleurs donn?es journellement par 6 cereus peruvianus du 1/07/02 au 31/09/02",font=0) but this message appears: Erreur dans title("nombre de fleurs donn?es journellement par 6 cereus peruvianus de 1/07/02 au 31/09/02", : valeur sp?cifi?e pour le param?tre graphique

Hello Shorewall list, I''m a happy Shorewall user since a few years now and everything works fine for me except one thing that I try to implement since a week, the multi-isp. I''ve downloaded the 2.4.0 Stable release yesterday and tried the RC2 since a week. My config is a Debian running a kernel 2.4.27 home made with the CONNMARK.diff patch applied I''m using 2 ISP,

Hi, I''ve read the following post that the htb doesn''t support police. I would like to know if htb supports police filter now. Does anyone know anything about this??? William __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com _______________________________________________ LARTC

hi all At last i got sucess !.. but am confused y it didnt work earlier..the difference today was that i reinstalled RH7.2 & complied kernel 2.4.16(not 17).. rest was same..... & the bandwidth too is under control!.. is it normal for to get more than said bandwidth--i mean i restricted a network with 8Kbit(with same script as below) but still was able to get a download(ftp) of

Bonjour sebastien bureaux wrote: > Bonjour, en fait quand j'ouvre un fichier texte, > par exemple, avec Traducteur-wxruby, la taille de > la police est normale jusqu'à un certain nombre de ligne, ensuite elle devient > toute petite. pourquoi? Je ne sais pas comment résoudre le problème. > Il faut à peu près dépasser les 1000 lignes pour que la taille change. > Merci pour

I have done the "definitive test" in my adsl line, using a real computer: * Without incoming traffic management, my dns can take about 30s or more to resolve a domain (when it resolve, sometimes it doesn''t) when my adsl line is saturated. So the queue of my ISP doesn''t give preference to the dns (at the reverse, is it seems penalyzed), But doing 3 paralell ftps (and

On Sun, Apr 24, 2005 at 11:43:42AM +0900, Duraid Madina wrote: > Are there some magic .vimrc lines that people can use to keep the > style police happy? (And if so, are these documented on the website > anywhere? I had a quick look, but couldn't find anything... By popular demand :), I just added a file llvm/utils/vim/vimrc which you may use as a starting point for setting up your

Hi all. Since I move on to 2.6 kernel , filter ingress policy based on nfmark won´t work. Sorry for my english. Simple example: iptables -t mangle -I PREROUTING -j MARK --set-mark 1 ${QDISC_ADD} handle ffff: ingress ${FILTER_ADD} parent ffff: protocol ip prio 100 handle 1 fw \ police rate 128Kbit burst 10k drop flowid 2:11 # tc -s -d qdisc ls dev eth0 qdisc ingress ffff: ----------------