similar to: upload vs download

Hi, I discover recently that the arp traffic is managed like any other flow. So you get hang after a moment if you don''t use a default class. Is the any means to avoid this ? Not to have a default class is a way to filter traffic ... One would be to managed to class ARP request with tc but I don''t know if it is possible. Thanks in advance, -- Éric Leblond courriel :

Hi there, in a specal case I want to send IP packets from one IP address to another IP address on the same multihomed linux box. The problem is, that the packets should leave the box by passing one ethernet interface, go through a hub/switch and get back into the box via the second interface. Well, this sounds crazy. Anyway, does anyone know a solution? Bernd

Hi there, i have some questions regarding CONNMARK and STRING modules for netfilter. I have a stateful firewall doing contraking, because i have two dsl connections doing load balancing. I have found a way to discriminate KaZaA traffic flowing via port 80 from normal HTTP traffic using the string match. I want to mark a kazaa connection and filter ir to a specific qdisc. I have been looking

https://bugzilla.netfilter.org/show_bug.cgi?id=835 Summary: protocol without option is failing Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: eric at

Hi guys, I have a mail server running qmail with two network interfaces. All packages comes from the first one and I want to mark outgoing packages to route them using the second interface (ADSL). I have write this script, but it ins''t work. All packages are returning by the first interface... :-( x-x-x # Tables, networks, interfaces, addresses and gateways IF1=eth0 T1=100

Hi all , does Kernel 2.4 supports CBQ and HTB by default or we have to recompile it. Regards Fahad Khan _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

https://bugzilla.netfilter.org/show_bug.cgi?id=1171 Bug ID: 1171 Summary: define statement does not accept negative numbers Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org

Hi, All, So far, all the applications I have seen for Iptables are focusing on connecting a WAN with one IP address to a LAN and using NAT. My question is if the iptables support multiple IP address on WAN side? If so, how it works (you only have one NIC on WAN side)? Is static NAT (it might not be the right term, I mean a static and permanent connection between WAN IP address and LAN IP address)

Hello, First I want to point out that I''m not so familiar with HFSC, since there not so much info online. But here is my script: ${TC} class add dev ${LAN_IFACE} parent 1:0 classid 1:1 hfsc ls rate 100mbit ul rate 100mbit ${TC} class add dev ${LAN_IFACE} parent 1:1 classid 1:2 hfsc ls rate 90mbit ul rate 90mbit ${TC} class add

https://bugzilla.netfilter.org/show_bug.cgi?id=1172 Bug ID: 1172 Summary: chain priority cannot be set by a defined variable Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo at netfilter.org

Hi, I''m having issues with policing my incoming traffic by matching packet marks made by iptables. I''ve checked as many sites and guides as I can find, and I seem to be doing the exact same thing as they all are, but there''s still no success. As such, I was wondering if anyone can have a quick look to see if I''ve done anything obviously stupid? Essentially, I

Hi all && happy new Year ;) I''m try to made a script for shaping my outgoing traffic, but it doesn''t work fine. The script work good if all packets go thru the default class, but, if I try to send packets by other class, the packes doesn''t go by this class go also by the default class. This script is installed in a router linux with ip masquerading for the

Hi all, For some reason VSAT or Satellite Internet services are not mentioned (or searchable) in this list's archives. I thought I'd let you know that I tested Asterisk using IAX (not IAX2) to make a phone call from an analog phone hooked up to an Asterisk system behind a Linksys router connected to a Gilat VSAT satmodem, and it worked. The "other end" (gateway) is a

https://bugzilla.netfilter.org/show_bug.cgi?id=1173 Bug ID: 1173 Summary: Documentation/error messages around NAT statements in "inet" tables incorrect Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: critical Priority: P5

Hi, I can''t find a solution to the problem of shaping efficiently non linear protocol as passive ftp, H323. Is there a way to use netfilter conntrack to class packet ? Is there on other way of doing this ? Any idea appreciated, -- Éric Leblond courriel : eric@regit.org

I put a bridging firewall together last winter (with some help) and have it= in production in front of a couple windows web and mail servers for going = on 6 months now. I used Fedora C1 with 2.4.22 kernel and 0.9.6 bridge-utils= . The bridge has solved a lot of security headaches. I use a modified start= up script written by David Whitmarsh that has worked really well. http://ww=

Hi! There is one thing I can''t do. In my country we have to pay for "foreign" internet. Local internet is cheap and fast, but foreign is slow and expensive. So I want do following: mark every packet with iptables, where --set-mark 1 for foreign internet, but --set-mark 2 for local internet next when I got all traffic marking, I need to assign traffic to users so I make

Folks, there is an issue pretty buried in the commits list that I suspect should have wider visibility. See r262188 and subsequent discussion. To summarize: it appears that mingw32 was unable to correctly produce a static data member when instantiated as a base class. The "fix" is to then explicitly instantiate the base class separately from its use in a base class. I think this is

> Message: 9 > To: lartc@mailman.ds9a.nl > Subject: Re: [LARTC] Traffic Balance > Date: Fri, 01 Oct 2004 20:26:55 -0300 (EST) > From: favero@grad.ufsc.br > > list members: if u don´t wanna help, dont disturb! damn god! > everybody here know that LARTC tutorial to load balance is > incomplete! > Alexis: try http://www.ssi.bg/~ja/nano.txt and search the list. > U

I'm replacing an ancient Solaris 'ipf' firewall/router with a brand new CentOS 6.3 system. In the olden days, I successfully used the attached iptables script (as /etc/rc.local) on Red Hat 5.x systems, but this doesn't seem to be quite working on the new system. Specifically, while it seems to be routing ok, you cannot connect to anything on the inside net (e.g., with ssh or