similar to: Crazy IP-Communication

Hi, I discover recently that the arp traffic is managed like any other flow. So you get hang after a moment if you don''t use a default class. Is the any means to avoid this ? Not to have a default class is a way to filter traffic ... One would be to managed to class ARP request with tc but I don''t know if it is possible. Thanks in advance, -- Éric Leblond courriel :

I have a tc script which splits the bandwidth in 8 leaf classes based on IP filtering. The script looks like this: tc filter add dev $LAN_IFACE protocol ip parent 1:0 prio 1 u32 match ip dst 192.168.0.121 flowid 1:11 The separation works excellent for downloads, but for uploads, it is ignored... Can you tell me how to deal with it? Thanks in advance, Vlad Mihai

Hi there, i have some questions regarding CONNMARK and STRING modules for netfilter. I have a stateful firewall doing contraking, because i have two dsl connections doing load balancing. I have found a way to discriminate KaZaA traffic flowing via port 80 from normal HTTP traffic using the string match. I want to mark a kazaa connection and filter ir to a specific qdisc. I have been looking

https://bugzilla.netfilter.org/show_bug.cgi?id=835 Summary: protocol without option is failing Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: eric at

Hi guys, I have a mail server running qmail with two network interfaces. All packages comes from the first one and I want to mark outgoing packages to route them using the second interface (ADSL). I have write this script, but it ins''t work. All packages are returning by the first interface... :-( x-x-x # Tables, networks, interfaces, addresses and gateways IF1=eth0 T1=100

Hi all , does Kernel 2.4 supports CBQ and HTB by default or we have to recompile it. Regards Fahad Khan _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

https://bugzilla.netfilter.org/show_bug.cgi?id=1171 Bug ID: 1171 Summary: define statement does not accept negative numbers Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org

Hi, All, So far, all the applications I have seen for Iptables are focusing on connecting a WAN with one IP address to a LAN and using NAT. My question is if the iptables support multiple IP address on WAN side? If so, how it works (you only have one NIC on WAN side)? Is static NAT (it might not be the right term, I mean a static and permanent connection between WAN IP address and LAN IP address)

https://bugzilla.netfilter.org/show_bug.cgi?id=1172 Bug ID: 1172 Summary: chain priority cannot be set by a defined variable Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo at netfilter.org

Hi there, I just got a new machine with Redhat Enterprise Workstation and samba 3.0.0-14 pre-installed. I am trying to connect it to my existing network which has a redhat v8 samba v2 PDC controlling 16 or so win2k and winxp machines. In the nmbd log I get this error 3 times every 5 seconds or so: nmbd/nmbd_packets.c:process_nmb_request(1448) process_nmb_request: Multihomed registration

Hello: I am currently planning to divide our network in smaller subnets. Our central server is a Samba AD DC File Server also acting as DC. My plan is subnet our current network, add a new interface for each subnet in the Samba File Server and configure it to listen in all new interfaces. Questions: 1 - Does this multihomed configuration have any drawback, specifically because AD relies

Hi all && happy new Year ;) I''m try to made a script for shaping my outgoing traffic, but it doesn''t work fine. The script work good if all packets go thru the default class, but, if I try to send packets by other class, the packes doesn''t go by this class go also by the default class. This script is installed in a router linux with ip masquerading for the

http://bugzilla.mindrot.org/show_bug.cgi?id=928 Summary: Kerberos/GSSAPI authentication does not work with multihomed hosts Product: Portable OpenSSH Version: -current Platform: Other URL: http://marc.theaimsgroup.com/?l=openssh-unix- dev&m=108008882620573 OS/Version: All

(was: "Re: Pending OpenSSH release, call for testing", topic drift at its finest :-) Markus Moeller wrote: > Douglas, > > OK three possible settings(hostname,connection IP,GSS_C_NO_NAME) are fine for me too. Does GSS_C_NO_NAME relate to this bug (addressless tickets)? http://bugzilla.mindrot.org/show_bug.cgi?id=488 BTW, I opened a bug the the multihomed thing a couple of

Hi On a multihomed box how can i set different gateways for each NIC? Setting them in the ifcfg-ethx does not seem to make any difference to the routing? thanks

Chris, Perhaps you need to perform some write_conf like command. I''m not sure if this is needed in 1.6 or not. Shane ----- Original Message ----- From: lustre-discuss-bounces at lists.lustre.org <lustre-discuss-bounces at lists.lustre.org> To: lustre-discuss <lustre-discuss at lists.lustre.org> Sent: Fri Mar 07 12:03:17 2008 Subject: Re: [Lustre-discuss] Multihomed

I have a location using a CentOS 5 server that's multihomed running Asterisk and iptables for internal web access. Recently some sales people got busted surfing some explicit content so the owner wants something in there to block this. I had heard of Dans Guardian and am reading about what's involved here but just wanted an opinion on what's the best solution for this. NTLM silent

https://bugzilla.netfilter.org/show_bug.cgi?id=1173 Bug ID: 1173 Summary: Documentation/error messages around NAT statements in "inet" tables incorrect Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: critical Priority: P5

Hello. I wonder how just correct couple of spdadd commands like spdadd 192.168.1.0/24 192.168.2.0/24 any -P out ipsec esp/tunnel/10.1.0.1-10.2.0.1/require; spdadd 192.168.2.0/24 192.168.1.0/24 any -P in ipsec esp/tunnel/10.2.0.1-10.1.0.1/require; makes _routing_ of packets from 192.168.1/24 into 192.168.2/24. If I understand correctly how it works on *BSD, these commands with make already

Hi, I can''t find a solution to the problem of shaping efficiently non linear protocol as passive ftp, H323. Is there a way to use netfilter conntrack to class packet ? Is there on other way of doing this ? Any idea appreciated, -- Éric Leblond courriel : eric@regit.org