similar to: HTB and ARP

I have a tc script which splits the bandwidth in 8 leaf classes based on IP filtering. The script looks like this: tc filter add dev $LAN_IFACE protocol ip parent 1:0 prio 1 u32 match ip dst 192.168.0.121 flowid 1:11 The separation works excellent for downloads, but for uploads, it is ignored... Can you tell me how to deal with it? Thanks in advance, Vlad Mihai

Hi there, in a specal case I want to send IP packets from one IP address to another IP address on the same multihomed linux box. The problem is, that the packets should leave the box by passing one ethernet interface, go through a hub/switch and get back into the box via the second interface. Well, this sounds crazy. Anyway, does anyone know a solution? Bernd

Hi there, i have some questions regarding CONNMARK and STRING modules for netfilter. I have a stateful firewall doing contraking, because i have two dsl connections doing load balancing. I have found a way to discriminate KaZaA traffic flowing via port 80 from normal HTTP traffic using the string match. I want to mark a kazaa connection and filter ir to a specific qdisc. I have been looking

https://bugzilla.netfilter.org/show_bug.cgi?id=835 Summary: protocol without option is failing Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: eric at

Hi guys, I have a mail server running qmail with two network interfaces. All packages comes from the first one and I want to mark outgoing packages to route them using the second interface (ADSL). I have write this script, but it ins''t work. All packages are returning by the first interface... :-( x-x-x # Tables, networks, interfaces, addresses and gateways IF1=eth0 T1=100

Hi all , does Kernel 2.4 supports CBQ and HTB by default or we have to recompile it. Regards Fahad Khan _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

https://bugzilla.netfilter.org/show_bug.cgi?id=1171 Bug ID: 1171 Summary: define statement does not accept negative numbers Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org

Hi, All, So far, all the applications I have seen for Iptables are focusing on connecting a WAN with one IP address to a LAN and using NAT. My question is if the iptables support multiple IP address on WAN side? If so, how it works (you only have one NIC on WAN side)? Is static NAT (it might not be the right term, I mean a static and permanent connection between WAN IP address and LAN IP address)

https://bugzilla.netfilter.org/show_bug.cgi?id=1172 Bug ID: 1172 Summary: chain priority cannot be set by a defined variable Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo at netfilter.org

Hi all && happy new Year ;) I''m try to made a script for shaping my outgoing traffic, but it doesn''t work fine. The script work good if all packets go thru the default class, but, if I try to send packets by other class, the packes doesn''t go by this class go also by the default class. This script is installed in a router linux with ip masquerading for the

Hi I''ve searched the archive for a solution where I want to limit/shape WLAN users. I only know''s their MAC, because they get their IP from dhcp. > Why not, just use negative offsets with U32 to access >the 14-byte eth frame header before the IP header: > >Decimal Ofs Description >----------------------------------- >-14: DST MAC, 6 bytes >-8: SRC MAC, 6

https://bugzilla.netfilter.org/show_bug.cgi?id=1173 Bug ID: 1173 Summary: Documentation/error messages around NAT statements in "inet" tables incorrect Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: critical Priority: P5

Hi, I can''t find a solution to the problem of shaping efficiently non linear protocol as passive ftp, H323. Is there a way to use netfilter conntrack to class packet ? Is there on other way of doing this ? Any idea appreciated, -- Éric Leblond courriel : eric@regit.org

Hi! There is one thing I can''t do. In my country we have to pay for "foreign" internet. Local internet is cheap and fast, but foreign is slow and expensive. So I want do following: mark every packet with iptables, where --set-mark 1 for foreign internet, but --set-mark 2 for local internet next when I got all traffic marking, I need to assign traffic to users so I make

On Tue, Aug 20, 2013 at 07:44:39AM +0200, leroy christophe wrote: > > > Find attached two patches I have in order to build klibc 2.0.2 > against kernel 3.8.13 > We had to introduce those patches when going from kernel 3.6 to kernel 3.7 > Hope it helps. > those patches are wrong and again very brittle. just use the way it is described in `make help': A) cd ~/src/linux

> Message: 9 > To: lartc@mailman.ds9a.nl > Subject: Re: [LARTC] Traffic Balance > Date: Fri, 01 Oct 2004 20:26:55 -0300 (EST) > From: favero@grad.ufsc.br > > list members: if u don´t wanna help, dont disturb! damn god! > everybody here know that LARTC tutorial to load balance is > incomplete! > Alexis: try http://www.ssi.bg/~ja/nano.txt and search the list. > U

Skipped content of type multipart/mixed-------------- next part -------------- A non-text attachment was scrubbed... Name: PGP.sig Type: application/pgp-signature Size: 186 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/rsync/attachments/20040227/923b87ee/PGP.bin

Hi everyone. I''m working on a problem since some days. I have a linux router with about 100 ppp interfaces. Each interface should bei limited to an individual bandwidth of 1024kbit, 2048kbit or 3096kbit. Up AND downstream. (let''s say for example 1024kbit upstream and 1024kbit downstream) The reason for this problem: I have to limit users to their booked bandwidth, because

Any votes for/against? ----- Forwarded message from Rik Faith <faith@alephnull.com> ----- Date: Wed, 28 Nov 2001 12:55:29 -0500 From: Rik Faith <faith@alephnull.com> To: mbp@samba.org Subject: rsync patch X-Mailer: VM 6.96; XEmacs 21.1; Linux 2.4.16 (light) Here is a patch that adds rate information (e.g., kB/s) to the --progress display. I just noticed that 2.4.7pre4 is coming

On (03/11/16 16:30), Minchan Kim wrote: > -static void *location_to_obj(struct page *page, unsigned long obj_idx) > +static void objidx_to_page_and_ofs(struct size_class *class, > + struct page *first_page, > + unsigned long obj_idx, > + struct page **obj_page, > + unsigned long *ofs_in_page) this looks big; 5 params, function "returning" both page and