similar to: I want to shaping FTP traffic.

The limit parameter for SFQ qdiscs isn''t listed in the howto. Based on a mail from this list from 4 may 2002 ("SFQ queue lengths - generalization"), I''d guess it limits the number of packets/bytes in in the queue, but wether it does so by number of bytes, packets, or time spent in the queue I don''t know. Perhaps someone in the know could add a line to the

Hi there, in a specal case I want to send IP packets from one IP address to another IP address on the same multihomed linux box. The problem is, that the packets should leave the box by passing one ethernet interface, go through a hub/switch and get back into the box via the second interface. Well, this sounds crazy. Anyway, does anyone know a solution? Bernd

Hi there, i have some questions regarding CONNMARK and STRING modules for netfilter. I have a stateful firewall doing contraking, because i have two dsl connections doing load balancing. I have found a way to discriminate KaZaA traffic flowing via port 80 from normal HTTP traffic using the string match. I want to mark a kazaa connection and filter ir to a specific qdisc. I have been looking

I have a tc script which splits the bandwidth in 8 leaf classes based on IP filtering. The script looks like this: tc filter add dev $LAN_IFACE protocol ip parent 1:0 prio 1 u32 match ip dst 192.168.0.121 flowid 1:11 The separation works excellent for downloads, but for uploads, it is ignored... Can you tell me how to deal with it? Thanks in advance, Vlad Mihai

Hi, I discover recently that the arp traffic is managed like any other flow. So you get hang after a moment if you don''t use a default class. Is the any means to avoid this ? Not to have a default class is a way to filter traffic ... One would be to managed to class ARP request with tc but I don''t know if it is possible. Thanks in advance, -- Éric Leblond courriel :

Hi all! On http://lartc.org/howto/lartc.adv-filter.html I read that a classifiers available bases the decision on how the firewall has marked the packet and on http://lartc.org/howto/lartc.qdisc.filters.html the following example: "tc filter add dev eth1 protocol ip parent 1:0 prio 1 handle 6 fw flowid 1:1" "iptables -A PREROUTING -t mangle -i eth0 -j MARK --set-mark 6" My

Hi, I am writing this email in sincere hope that somebody experienced similar/same problem and found solution to it. The classical bridge setup could be achieved using brctl tool, which could be found at: http://home.regit.org/br2684.html I have an ADSL CO line card Linux based [2.4.24 kernel] with 8 nas interfaces and eth0. Rather than having bridge, the decision was to have a router, which

https://bugzilla.netfilter.org/show_bug.cgi?id=835 Summary: protocol without option is failing Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: eric at

Hi all , does Kernel 2.4 supports CBQ and HTB by default or we have to recompile it. Regards Fahad Khan _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

https://bugzilla.netfilter.org/show_bug.cgi?id=906 Summary: include systemd service file Product: ulogd Version: SVN (please provide timestamp) Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: ulogd AssignedTo: netfilter-buglog at lists.netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1171 Bug ID: 1171 Summary: define statement does not accept negative numbers Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org

Hi, All, So far, all the applications I have seen for Iptables are focusing on connecting a WAN with one IP address to a LAN and using NAT. My question is if the iptables support multiple IP address on WAN side? If so, how it works (you only have one NIC on WAN side)? Is static NAT (it might not be the right term, I mean a static and permanent connection between WAN IP address and LAN IP address)

https://bugzilla.netfilter.org/show_bug.cgi?id=1172 Bug ID: 1172 Summary: chain priority cannot be set by a defined variable Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo at netfilter.org

Hi guys, I have a mail server running qmail with two network interfaces. All packages comes from the first one and I want to mark outgoing packages to route them using the second interface (ADSL). I have write this script, but it ins''t work. All packages are returning by the first interface... :-( x-x-x # Tables, networks, interfaces, addresses and gateways IF1=eth0 T1=100

Hi all && happy new Year ;) I''m try to made a script for shaping my outgoing traffic, but it doesn''t work fine. The script work good if all packets go thru the default class, but, if I try to send packets by other class, the packes doesn''t go by this class go also by the default class. This script is installed in a router linux with ip masquerading for the

https://bugzilla.netfilter.org/show_bug.cgi?id=1173 Bug ID: 1173 Summary: Documentation/error messages around NAT statements in "inet" tables incorrect Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: critical Priority: P5

Hi! There is one thing I can''t do. In my country we have to pay for "foreign" internet. Local internet is cheap and fast, but foreign is slow and expensive. So I want do following: mark every packet with iptables, where --set-mark 1 for foreign internet, but --set-mark 2 for local internet next when I got all traffic marking, I need to assign traffic to users so I make

> Message: 9 > To: lartc@mailman.ds9a.nl > Subject: Re: [LARTC] Traffic Balance > Date: Fri, 01 Oct 2004 20:26:55 -0300 (EST) > From: favero@grad.ufsc.br > > list members: if u don´t wanna help, dont disturb! damn god! > everybody here know that LARTC tutorial to load balance is > incomplete! > Alexis: try http://www.ssi.bg/~ja/nano.txt and search the list. > U

Hi everyone. I''m working on a problem since some days. I have a linux router with about 100 ppp interfaces. Each interface should bei limited to an individual bandwidth of 1024kbit, 2048kbit or 3096kbit. Up AND downstream. (let''s say for example 1024kbit upstream and 1024kbit downstream) The reason for this problem: I have to limit users to their booked bandwidth, because

Hi, everyone, I've recently bought a UPS from Mecer. This is a South African brand that basically resells Mustek hardware, and this UPS is no exception; it's a Mustek product. It does come with software for Linux, but that is terrible (the background process that monitors the UPS is written in Java and needs a terminal to start properly, so you can't run it from a startup script...