similar to: Any NISTNet alternative or fix ?

>From: Stef Coene <stef.coene@docum.org> >To: tony.cheung@asiayeah.com, > Tony Yat-Tung Cheung <dragonman@asiayeah.com>, lartc@mailman.ds9a.nl >Subject: Re: [LARTC] Simulation with Packet Lost and Packet Delays >Date: Mon, 22 Dec 2003 17:03:27 +0100 > >On Sunday 21 December 2003 16:31, Tony Yat-Tung Cheung wrote: > > >>Hi All, >> >>I would

Hi, I have a suspicious problem with multiple uplinks configuration. First of all my configuration: 1) kernel 2.6.20.3 2) iptables 1.3.7 3) last iproute (for masked marks) All wan interfaces are bridged (stp disabled) in only one interface (wan0), all lan interfaces are bridged (stp enabled) in only one interface (zlan0). The wan0 bridge is to allow UPnP works. To allow related

Just saw from build 2036: Starting mini_httpd... WARNING WARNING WARNING YOU STILL HAVE NOT CHANGED YOUR HTTPS ADMIN PASSWORD ANYONE THAT KNOWS YOU ARE USING ASTLINUX CAN DESTROY YOUR SYSTEM. PLEASE CHANGE THIS OR DISABLE THE HTTPS ADMIN INTERFACE IMMEDIATELY! Example: htpasswd /var/www/admin/.htpasswd admin WARNING WARNING WARNING Starting mini_httpd (HTTP only)... cat: can't open

https://bugzilla.netfilter.org/show_bug.cgi?id=1227 Bug ID: 1227 Summary: Current conntrack state isn't considered when evaluating multiple SNAT rules Product: netfilter/iptables Version: unspecified Hardware: All OS: other Status: NEW Severity: enhancement Priority: P5

Greetings all. I need a transparent way of selectively controlling packet flow between two network devices such that for example I can "see" [e.g. tcpdump] a packet coming into eth0, queue it, and then manually release it out eth1, one packet at a time. See diagram below. (Reason for doing this is to watch the behavior of the device under test to certain packets but I cannot control

https://bugzilla.netfilter.org/show_bug.cgi?id=851 Summary: IPv6 SNAT target with --random doesn't work Product: netfilter/iptables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: normal Priority: P5 Component: NAT AssignedTo: netfilter-buglog at lists.netfilter.org

I administer a nano-setup on a dorm-network with a couple of hundred active users. The setup uses 2 x 2 2Mb/s DSLs, meaning two DSLs from each of two different ISPs. It works fine except for some minor glitches: https-sites often kicks users. This was solved by tying outbound https to a single DSL. Not the best solution but it works so far that users dont kicked from the sites anymore. Now

Hello all, I have an asterisk sip/iax peer behind a linux gateway doing nat. I''m using pppoe with a dynamic ip that changes frequently. The problem is when the line drops the sip/iax registrations drop as well, and they don''t register thereafter. When I check the conntrack entries, I noticed the entries still have the old wan ip address and because of keepalive (i''m

Hi all, I have 2 ISPs on a Linux router and a local network with one Linux server and many windows. The local network is masqueraded. I want to give access to port 25 and 80 of my server from any incoming request (i.e. from my 2 ISP). I have made a DNAT translation, witch work but the outgoing answers are not routed correctly. Of course, the de-SNAT process is done before the routing process. So

hi, I am really a newbie in linux traffic control.But i have task to implement a tool similar to the nistnet tool used for netwok emulation tests but which emulates a wireless environment. I was exploring the use of the traffic control subsystem for this task.In this regard i have a few questions i need to post in order to clarify my thoughts on how to do this.I am using tcng to classify

http://bugzilla.netfilter.org/show_bug.cgi?id=792 Summary: ip_conntrack keep updating incorrect entry in conntrack table after default routing changed Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: Fedora Status: NEW Severity: minor Priority: P5 Component:

Update to iproute2 utilities, mostly bug fixes. Only new functionality is integration of the ability to derive netem distribution table from experimental data; simple port from NISTnet. Download from http://developer.osdl.org/dev/iproute2/download/iproute2-050207.tar.gz [Mads Martin Joergensen] Don''t mix address families when flushing [Jean-Marc Ranger] Need to call getline() with

Hi all, I am a newbie to linux and this is my first mail to this group. We have a PC running Centos version 2.6.9-42.0.2.EL. I needed to load a router software called Nistnet and it would not run properly. It is looking for RTC (Real Time clock) support as a module. I 've gone through the LKM Loadable Kernel module support under Documentation pages of Linux.org and did the following:

Hi! I get this strange behaviour... I don''t know how some packets get into wrong rules. My rules are those: 0: from all lookup local 50: from all lookup main 201: from 192.168.17.0/28 lookup 201 202: from 192.168.16.0/28 lookup 202 222: from all lookup 222 32766: from all lookup main 32767: from all lookup default Table main has: 192.168.17.0/28 dev eth2

Hi, this is my first post to the list. I have googled a lot, and still cannot find a proper solution. I hope someone here will be able to shed some light on my doubts. I have set up a firewall using kernel 2.6.15 (Debian) that does NAT for 100 clients, and uses two different ISPs, using the howto found at http://lartc.org/howto/lartc.rpdb.multiple-links.html. I have *not*

https://bugzilla.netfilter.org/show_bug.cgi?id=1448 Bug ID: 1448 Summary: SNAT/DNAT/Masquerading not working for UDPLite protocol Product: netfilter/iptables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: normal Priority: P5 Component: NAT

I already understood that a packet enters chains in the ''nat'' table only if it is the _first_ packet of a connection. In that case, we may do SNAT in the POSTROUTING chain of the ''nat'' table. So, the packets arrive to the POSTROUTING chain of the ''mangle'' table with the source IP address changed (if it''s said by the rules of the

I have a gentoo 2.6.14 box with 4 nics, LAN/DMZ/PUB1/PUB2 LAN and DMZ have a 1918 /22 each, PUB1 and PUB2 have a /29 each of which 5 ips are assigned. Using the mangle table, I give all packets a mark (according to local policies) in the range 1-10. Using ip rule, i pass marks 1-5 through the pub1 route table, and marks 6-10 through the pub2 routing table. Using the nat table, I SNAT to one

On Friday 24 June 2005 20:57, Derek Vincent wrote: >>Hello all, >> >>I have shorewall setup with 3 SNAT entries for external IP address''s to >>a single IP internal address. I am wondering how to limit access based >>on the source IP address. >>ex. >> EXT IP 1 access only to port 25 >> EXT IP 2 access only to port 443 >> EXT IP 3

https://bugzilla.netfilter.org/show_bug.cgi?id=839 Summary: SNAT66 does not work for bidirectional UDP Product: netfilter/iptables Version: unspecified Platform: x86_64 OS/Version: Gentoo Status: NEW Severity: normal Priority: P5 Component: NAT AssignedTo: netfilter-buglog at lists.netfilter.org