similar to: simple error in extensions/libipt_ROUTE.c extensions/libipt_IMQ.c

ingress can be used to control the incoming packet, such as: tc qdisc add dev eth0 handle ffff: ingress tc filter add dev eth0 parent ffff: protocol ip prio 5 u32 match ip src 172.16.1.11 police rate 10kbit burst 10k drop flowid :1 tc filter add dev eth0 parent ffff: protocol ip prio 5 u32 match ip src 172.16.1.22 police rate 10kbit burst 10k drop flowid :2 first ,I do not sure these method can

Hello everybody, I have tried several iptables versions (from 1.2.4 to 1.2.6a) to mark outgoing packets (change the DSCP field) with no success. #iptables -A OUTPUT -t mangle -d 10.0.0.3 -j DSCP --set-dscp 0x2 iptables v1.2.6a: unknown arg ''--set-dscp'' TOS target is working fine, but I want to create different codes for EF and AF classes in a diffserv

Hi, I don''t really know if this is the correct list for asking this, if not a referral to the correct list would be very much appreciated. Ok here it goes. I would like to create a u32 filter for tcp packets that are larger then 1480 bytes but I am not really sure how of if this can be done. I know about the pattern and mask thing but I am not terribly familiar with the masking

Hello, I have made every effort learning QoS. I chose HTB and wrote a script (attached to the message). The problem is error messages in syslog. They appear on heavy load. It looks like: Jun 12 23:00:04 server kernel: KERNEL: assertion (delay > 0 && delay < 5000000) failed at sch_htb.c(411) Jun 12 23:00:41 server last message repeated 12 times Jun 12 23:01:42 server last message

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=100 Summary: NETFILTER_VERSION -> IPTABLES_VERSION in libipt_IPMARK.c Product: iptables userspace Version: unspecified Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: iptables

Has anybody got imq running on iptables 1.2.7a. The home page for imq only seems to have a patch for 1.2.6a. -- Aaron Clausen _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

I have a linux box with kernel 2.4.22 and iptables 1.2.9 First, i patch linux kernel with Norbet Buckmuller''s .diff #cd \usr\src\linux #patch -p1 < imq-combo-debian-2.4.22.diff All correct Second, i -try to- patch iptables (following www.linuximq.net/faq.html) #cd /usr/src/linux/net/ipv4/netfilter I edit IMQ.pom-ng.patch and replace $KERNEL_DIR with /usr/src/linux #patch

My install was working for a couple of months until I rebooted my puppet server. The clients do not report an error when I run puppet agent -t. I''ve attempted to remove certificates and renew. The clients get new certificates, but the console still does not update. Even the puppet server itself is not updating as a client. After reboot the only thing I have noticed that changed

I have a small environment with a single puppetmaster and puppetdb on the same node that I get sporadic "Failed to submit ''replace facts'' command" errors from nodes. It isn''t consistent about which nodes are causing the error and I can''t find anything else going on at the same time on either the master or the agent that these errors happen. Here

First of all, I''d like to thank Andy Furniss for his direction and for helping me get a working example up and running. For the following set up to work, you will need a linux computer at the ISP (server), a linux computer at the client location (client), and some a public range of IP''s you plan to send down to your client. (as this configuration involves patching the linux

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=20 ------- Additional Comments From laforge@netfilter.org 2003-03-04 18:46 ------- is this bug (esp. the dscp-issue) still present with current CVS? I can't even reproduce the problem anymore... ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Hi, I am trying to use Hiera in puppet 3 and I have two nodes that both need the same configuration. In this case they are two web servers which have the same apache configuration. Rather than creating two seperate hiera files for node1.yaml and node2.yaml is there a way to group these by role (e.g. webserver.yaml)? I want to avoid duplicating the configuration if possible and keep the data

lartc-request,hello! 　　 I find a line in tbf_change() in sch_tbf.c: ptab = xchg(&q->P_tab, ptab); Can I consider that the pointers are exchanged between q->P_tab and ptab? as following: prev=q->R_tab; q->R_tab = rtab; rtab = prev; Is my understanding righ? ======= 2002-03-23 12:01:00 you wrote:======= >Send LARTC mailing list

Im new to puppet and installed it in my home lab to mess with, when i installed it i used the hostname rather than FQDN so went back and changed puppet and reran the certificate tool to regenerate the certificates etc, the agent works fine now but i am getting an mccollective error i think, is there anything in the config i need to change for mccollective after altering the name to the FQDN?

Dear All, I''m very new to Puppet Enterprise.... I have the following setup so far: 1. Puppet Master (Puppet Ent) on Ubuntu with its own Agent 2. Puppet Agent on MAC Mountain Lion Everything looked ok but then I noticed this on the MAC (below), which suggested to me I had the wrong Agent? I''m a little confused on how to get the Puppet Ent Agent for MAC? Info: Retrieving

Does anyone know why i would get a module error for my ''base'' module that I''m not even including for a node? I''m explicitly NOT include the ''base'', yet puppet-client-t2 still errors when i pull it in. Snips from both are below. Any ideas why this would happen? Thanks, JJ ==== site.pp file [root@puppet-master-t1 puppet]# cat

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=25 delaunois@info.ucl.ac.be changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED OS/Version|other |All Resolution|

I want to compile a custom xenU kernel for a firewall distribution (endianfw, version of ipcop), I can get it to load up but the kernel is missing some modules that aren''t resident. So I want to make a custom version for this domU, I know what I need kernel+openswan+xen+patch-o-matic but I not sure the best way to go about this, do I patch a fedora source or start with a vanilla kernel?

Hi there, I''m running into an problem which I can resolve. It is bugging me for couple of days now. Goal: CentOS 6.4 freshly installed incl puppet 3.2.3 and I want to install puppet master, puppetdb, mod_passenger & apache with "puppet apply". So when this is complete, I should have an puppet master server running so I can create new hosts etc. So this is the command

I''ve followed this list for quite a long time and have even posted a couple of times. I used the early versions of IMQ from Devik (I think that was his name), and it worked well. I only ever got the chance to implement it in my test environment. I now need to implement it in my production environment. My Linux core router has nine interfaces and has a 27 megabit connection to the