similar to: Packet dropping

Hi gurus, I need a way to do SNAT based on source mac before routing. This is because hosts attached to my gateway can have duplicate IP addresses, and I have to distinguish over them. I tried to use the nat tool that comes with iproute2, but this force to make a mapping only address to address, and I wanted to do it by mark (I also use iptables to do that). For example, I tried to

Hi Nitin, First of all, you can verify that ntpd is responding on ingress with netcat : nc -u ingress 123 (udp connection on port 123) also try a netstat -an on ingress to be sure that the port 123 is in listen state... I recently install ntpdate, and it has worked as a client and a local ntp server immediatly. Good Luck, Yannick / Annecy in France -----Message d''origine----- De :

Dear list, before writeing this mail I really searched in the mailing list and deeply red the HOWTO, but I didn''t find a clear and univoque answer to my doubt. What is the meaning of the priomap? And what kind of TOS concerns? My first opinin was the one-to-one correspondence of the priomap and the 16 values of the four TOS bits. I mean priomap 1 2 0 3 0 0 0 0 0 0 0 0 0 0 0 1 implies

Hi Well, subject says all. In Chapter 9.2.2.1, TBF, the parameter mpu or "minimum packet size" is explained as: > A zero-sized packet does not use zero bandwidth. For ethernet, no packet > uses less than 64 bytes. The Minimum Packet Unit determines the minimal > token usage for a packet. In my understanding an ethernet packet needs at least 14 (2*6+2) bytes or 54 bytes if

Hi again, I just ran into a seriously strange glitch, and was wondering if anybody had experienced this... I have an HTB class with an iptables classifier. The iptables classifier shows packets hitting the rule for this class. Now, HTB drops these packets (''dropped'' increases), even although the packets are small, and there are over 10000 tokens available. Is there any

Hi all, Does anybody know a package to control the bandwidth using "TCP Congestion Control" method? Best Regards Hoomaan Naimi Afranet Network Administrator

I would like to differentiate incoming traffic streams to guarantee minimum bandwidth to some services. However, as per the Adv-Routing-HOWTO it appears that only outgoing traffic can be shaped. Is this correct or is there a way of shaping incoming traffic? The problem could possibly be overcome if there is a way of routing traffic through a virtual host. Any tips on how to go about that? --

Hi, I have a dial up box (1.4) and another as an dns server. The default route on 1.4 is for the dial out for the other hosts. If I want to establish an connection (http) from the dialout box I can''t establish it (Network unreachable). The other hosts are configured with an default gateway 192.168.1.4 and have no such problems. Routing tables Internet: Destination Gateway

Hi, I''m currently looking for a QoS extension that allows to limit the packet rate to a given value. As I''m using HTB at the moment bandwidth limiting works pretty well but packet rate limiting would be superb. I do traffic shaping on a firewalling bridge (2.4.21) using iptables mark and HTB. Any suggestions would be appriciated! Regards, Mike -- COMPUTERBILD 15/03:

Firstly... sorry to those of you on both the netfilter and lartc list who''ll end up with this message twice... I am trying to find out what kind of latency I can expect when dNAT''ing UDP packets on (probably) a mid-range P3 server, 32-bit 33MHz PCI bus with Intel EEPro NICs. It''ll most likely be running whatever the latest 2.4 kernel will be at the time, unless there

Hi there, I have a little problem. I had this some months ago but didn''t solve it back then. I have patched my kernel with Layer 7 support and patched my iptables to support it, too. Now I inserted this line in my firewall script on my router for testing purpose: $IPTABLES -t mangle -A POSTROUTING -o $INET_IFACE -p tcp -m layer7 --l7proto http -j DROP It works, BUT only if the

Hello. I need help with limiting bandwidth. I have read every tutorial I''ve come over and I just can''t make anything work. Ok, here''s the scenario: I have a gateway, which has five network interfaces (eth0 -> eth4), eth0 is the ''external'' one and eth[1-4] are supposed to be limited to 128Kbit/s each. The interfaces eth[1-4] each have a C-class

Hi, I would like to control download bandwidth from the Internet for clients inside a network. The gateway is a Linux box using ''iptables nat''. I would like to use ''iptables mangle'' to mark the packets coming from the Internet and going to specific clients and then use CBQ to shape it: +-----------+ Internal network | Linux

Hey guys, I have several Linux routers in place at high-usage locations (student apartment complexes). I''m having trouble with some of the routers which use 6Mbit DSL lines as their Internet feed. The routers use PPPoE and perform NAT. During peak usage periods, the routers are dropping alot of packets. I''m lead to believe this is because there are too many active

Hi All, Can I backport 2.4.20 kernel version''s HTB related changes to 2.4.14 ? Will this work w/o any issues ? Please consider this urgent and replay asap. Thanks in advance, Reema. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Hi, I am not sure if this problem has been discussed already. I am running red-hat LINUX 2.2.14 and the version of iproute that comes with it. The problem is that whatever I give as a command it tells me RTNETLINK answers : Invalid argument Example : tc qdisc add dev eth2 handle 10: root estimator 1sec 8sec prio bands 3 priomap 0 1 2 I have tried all kinds of combinations and it refuses to

Hi! I''m trying to limit the uplink bandwidth using htb but no packets are overlimit or dropped. :-( My router config: * Linux kernel 2.4.20-pre10 (htb v3.7) with everything built as modules in QoS, iptables in use. * tc binary from htb3.6-020525.tgz * external interface eth0: Internet access, 512 kbit/s uplink speed * internal interface eth1: internal LAN, 100 Mbit/s The hosts in the

I´m shaping with htb with a kernel 2.4.25 compiled with PSCHED_CPU. What i´m noticing (in mrtg) is that traffic coming in to eth0 (internet side) is much bigger than eth1(Lan side). I think this is due to packets being dropped right? In this case, is there any way to avoid this? because right now traffic coming from the router is being wasted right? This is the output of tc: tc -s class show

Hi, I have typical situation, local LAN with private addresses, translated via NAT to internet. I need to shape ingress traffic (from internet to local LAN) in several HTB queues accorting to destination (private not public) IP. So I need mark packets to divide them to corresponding queue. According to http://www.docum.org/stef.coene/qos/kptd/ I thing I have only one way how to do it, because

Hi all, I have the following problem. A Linux box configured as a bridge. One interface connects to the router via a crossover cable, the other connects to a switch via the cable that used to go to the router. Now I get the following: [root@localhost net]# ifconfig eth3 eth3 Link encap:Ethernet HWaddr 00:03:2D:07:61:5D UP BROADCAST MULTICAST MTU:1500 Metric:1 RX