similar to: Fwd: Re: Re: [PATCH] Marking packets according to user in tcrules

Hi, First of all, thanks to all shorewall developers. Shorewall is really great. Here is a patch to add the following feature : This patch allows you to mark packets according to the user name under which the program generating output is running. To do so, the patch will allow you to write rules in the tcrules file looking like that : #MARK SOURCE DEST PROTO PORT(S) CLIENT USER #

> Message: 9 > From: Sylvestre Taburet <sylvestre.taburet@free.fr> > Reply-To: sylvestre.taburet@free.fr > Organization: @telier > To: Joel Hammer <Joel@HammersHome.com>, > =?iso-8859-1?q?Fr=E9d=E9ric=20SCHWIEN?= <fred@igtech.fr>, > samba@lists.samba.org > Subject: Re: [Samba] Linux Client > Date: Wed, 17 Jul 2002 23:23:25 +0200 > > Le Mercredi

This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. ---559023410-1141662977-1014960253=:3119 Content-Type: TEXT/PLAIN; CHARSET=iso-8859-1 Content-Transfer-Encoding: QUOTED-PRINTABLE Content-ID:

Hello, It seems that the following restriction is not shown in the online man page for tcrules: ERROR: SOURCE/DEST PORT(S) not allowed with PROTO all : /tmp/shorewall/tcrules (line 2) Please let me know if this is expressed otherwise in the documentation. Thanks. ------------------------------------------------------------------------------ EditLive Enterprise is the world''s most

Hi, first of all, let me thank you for your great Shoreline Firewall. I use it with great success at home (protecting my WiFi connection). And now if I could have a question about traffic shaping. I did read everything I could find but I still have two problems: first, the MARK from tcrules is not working in HTB based simple tc filter line ("handle $MARK fw classid 1:20"). If I switch

I have just installed shorewall 2.0.9, having spent a day and a half tracking down why my tcrules wasn''t working properly in 2.0.8. I didn''t see the announcement of 2.0.9 because it didn''t go to -announce. Anyway I have 2.0.9 now (the package from Debian incoming) and the problem is still there. My tcrules file says: 1 0.0.0.0/0 0.0.0.0/0 tcp 22 1 0.0.0.0/0 0.0.0.0/0

I have two (interconnected) questions: First of all, I''m trying to use IPP2P to classify my P2P traffic and give it a lower network priority. I''ve already successfully built IPP2P into iptables and the kernel. I read http://www.shorewall.net/IPP2P.html, but it''s confusing me. Using the documentation for normal tcrules in 3.0

Yessssssssssssssssssss !! THANKSS it Works !!!! Thanks a lot, if you come to Lille,France I''ll Offer you a big Beer) Joffrey -----Message d''origine----- De : shorewall-users-bounces@lists.sourceforge.net [mailto:shorewall-users-bounces@lists.sourceforge.net] De la part de Tom Eastep Envoyé : jeudi 19 octobre 2006 21:46 À : Shorewall Users Objet : Re: [Shorewall-users] Tcrules

Hello Asterisk sits in a Vserver guest (192.168.3.9) on the firewall. I can''t seem to get the sip helper to mark the SIP packets though. I have an ftp client on a different Vserver guest on the firewall. If I put ftp in the HELPER column of tcrules I can mark those packets. With sip in the HELPER column though nothing happens. Attached is a "shorewall dump > dump.txt"

Hi Folks, I''m a new user to Shorewall, it came installed on the redWall firewall that I am using and I''m really happy with both projects! Thanks for all your work on it! I have a question about tcrules and $FW. I''m doing source policy routing and need to be able to add an output rule to the mangle chain with a source that is specific network, not 0.0.0.0/0. It

Hi, I am confused about the tcrules syntax. When I try to shape a web server running on fw with this line: 4 fw 0.0.0.0/0 tcp - 80 it works but the "80" must be in CLIENT PORT, my logic says it should be in the "PORT" column (doesn''t work there) am I missing something or are the columns labeled wrong? thx Jan

Hi all, I moved wshaper 1.1 cbq file to tcstart, but none of my tcrules are being observed. The only way I can set the marks is by editing the tcstart file. Is there a way to incorporate for tcstart to read and apply my set marks in tcrules? Thank you, ~Andrew Nady.

Hi Fr?d?ric, It appears Ben made his own version of this patch (probably based on the one you added to the kernel bz), and it's already upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.6-rc2&id=0e6176c6d286316e9431b4f695940cfac4ffe6c2 Cheers, -ilia On Thu, Feb 20, 2020 at 12:19 PM Fr?d?ric Pierret <frederic.pierret at qubes-os.org>

I was previously using multiple providers on my "real linux" gateway which had a kernel that supported high marks and I was policy routing in tcrules. I''ve now moved to openwrt where their kernel apparently does not have high marks. I want to continue to be able to have multiple providers and a) policy route between them and b) be able to set marks for other things like

Hello all, I will introduce myself, I'm french, about 34 years old and works for a mechanic company. I've discovered linux in 2006 and I'm really enjoyed by all the things that can be done with. Now this is questions : Is it possible to configure a system of authentication based on SSO samba (and certainly ldap and lot of others things) ? Is it possible to do this without any

Hello, I would like to upload windows printer driver to my Samba through the printer "Advanced tab" as described in that doc http://www.samba.org/samba/docs/man/Samba-Guide/happy.html#id2582657 but this tab is totally grayed. I can imagine it's a permission issue but I'm not sure at all. Any idea, Frederic

Pointer to structure array is assumed not NULL by default. It has the consequence to raise a kernel panic when it's not the case. Basically, running at least a RTX2080TI on Xen makes a bad mmio error which causes having 'mthd' pointer to be NULL in 'channv50.c'. From the code, it's assumed to be not NULL by accessing directly 'mthd->data[0]' which is the reason

-----Message d'origine----- De?: Viatte Fr?d?ric Envoy??: mercredi, 19. mai 2010 11:58 ??: 'Michael Wood' Cc?: tms3 at tms3.com; samba at lists.samba.org Objet?: RE: RE : [Samba] RE : RE : Example of command ". / Setup / provision" I solved this error, but I have another one now, here it is: Error occurred while starting named service. Error: / usr / local / samba /

Hello, Can someone explain me how to do caller based routing. Here is my example. I have an asterisk between a PBX and the PSTN. The second company get the same, and so, I can interconnect them by VoIP. Classic architecture. My problem is when I want to place fax. The calls between the 2 sites are in gsm codec. So the fax doesn?t work! Is there any possibilities to do caller based routing in

Hello Timo, I'm using linux Fedora Core 2. The permissions are : drwxrwxrwt 2 root mail 32 2004-06-16 04:45 /var/spool/mail/ These permissions are made buy the command chmod a+rwxt /var/spool/mail. So if someone wants to erase the /var/spool/mail directory, it's possible unfortunately. If there are theses permissions the user can receive his mails but it's