similar to: www.shorewall.net Scheduled Maintenance (fwd)

Hi, I''ve setup quagga on a shorewall firewall server. The only purpose for this is to use BGP to connect to a "peering platform" supplied by our data centre supplier. There are some very large ISP''s (and other various providers including google) on this peering platform and connecting to it will speed up access to/from our services and hosted servers. The physical

Hi list, My network was assigned a private AS and my ISP(4) urged me to use BGP ! My Other 3 providers on my Shorewall BOX are typical aDSL lines while the 4th is an 1G optical uplink with 64 addresses. Currently I am in a balance, track mode in shorewall ISP setup.. After I installed - configured and started zebra + bgp my static routing tables got filled with about 850 static routes to

One final consideration I forgot to mention, make sure you have a beefy router. Depending on your BGP configurations, if you want to receive all routes from the internet, that can seriously bog down a low end router. I'm not saying you can't get by with a low-end router, just make sure your router can handle the results of your BGP configs. --Todd -----Original Message----- From:

In a nutshell and very first of all, you need at least 2 internet connections. Those ISP must be willing to setup BGP peering between your routers and theirs. Once that agreement has been made, you need to get their AS Numbers and submit the ASN request located on ARIN's website (http://www.arin.net). After some paperwork and money exchanges, ARIN assigns you an AS number. At that point,

Hi, I plan to implement a redundant Internet connection using BGP on 2 different Linux Routers. The routing daemon software I will be using is Zebra (zebra.org). I''m wondering if I should have my Linux firewall behind the 2 BGP routers, or could I keep the shorewall on both BGP routers? Has anyone had any experience with this? Any help is much appreciated. Thanks, Sam

Cross posted to Netfilter and LARTC... Grant & ArcosCom Linux User Thanks for your replies. Firstly, one problem was with my Token Bucket Filler on one of the interfaces, as it was dropping lots of packets and stopping connections from working over that interface. This lead to some strange results, with apparent partial success. Secondly, I''ve decided against trying to get it

Before I start, I don''t want to do ECMP or simple bonding ... I have multiple Internet connections available to multiple boxes on one of my networks. Box A connects to ISPs 1, 2 and 3 Box B connects to ISPs 1 and 4 Boxes A and B are both connected to each other and the rest of the network. 1) I would like to set up some dynamic routing in such a way that any given outgoing packet from

Refering to pppoe i have next problem : I asked my isp if i can buy a class of real ip`s to be routed by them. They said elegantly it can`t be done . I want opinions . I am using an ADSL connection through a Speedtouch 510 configured in bridge. About Bgp : i asked someone if i can peer 2 different locations on 2 different ip`s using private asn number and he said yes , and what i don`t

Hi, I have successfully shape bandwidth using htb.init using ip address , but when i try to shape zebra BGP using their ip address and BGP port it can''t match the class for BGP and always get the default class. Here''s my htb.init script in the bridge : #eth0-2:50.bgp RATE=128kbit RULE=192.168.192.163 RULE=192.168.199.22 RULE=*:179 #eth1-2:50.bgp RATE=128kbit

We have a client that wants to bond 2 DSL circuits instead of getting a T-1 (or similar) at their office to run their VoIP traffic on. We came across this Multihomed Gateway (MH200): http://www.cyberpathinc.com/mh200/details.htm Does anybody think this would work if installed at the client location handling NAT for 10 Cisco 7960's and connecting to our public asterisk server? My concern

Just to clarify, I'm looking at this from an application layer Point of View. One of the reasons why I'm looking at it that way, is because Tim said he was looking at LinuxHA..."application level" redundancy that uses IP. Tim, just to let you know, I don't believe that LinuxHA will work in the way you described, only because of the different IP ranges. It looks like Linux

Beta 3 is now available for testing. http://www.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.0-Beta3 ftp://ftp.shorewall.net/pub/shorewall/development/4.4/shorewall-4.4.0-Beta3 ---------------------------------------------------------------------------- P R O B L E M S C O R R E C T E D I N 4 . 4 . 0 Beta 3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:06.tcpdump Security Advisory The FreeBSD Project Topic: Buffer overflow in tcpdump(1) Category: contrib Module: tcpdump Announced:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-07:06.tcpdump Security Advisory The FreeBSD Project Topic: Buffer overflow in tcpdump(1) Category: contrib Module: tcpdump Announced:

Between 10:00AM and 1:00PM CST on Saturday, November 13, the services below will experience extended outages as the servers that host them are upgraded and reconfigured: downloads.digium.com downloads.asterisk.org bamboo.asterisk.org packages.asterisk.org svn.digium.com svn.asterisk.org issues.asterisk.org reviewboard.asterisk.org wiki.asterisk.org code.asterisk.org We apologize for any

Between 10:00AM and 1:00PM CST on Saturday, November 13, the services below will experience extended outages as the servers that host them are upgraded and reconfigured: downloads.digium.com downloads.asterisk.org bamboo.asterisk.org packages.asterisk.org svn.digium.com svn.asterisk.org issues.asterisk.org reviewboard.asterisk.org wiki.asterisk.org code.asterisk.org We apologize for any

Between 10:00AM and 10:00PM CST on Saturday, November 13, the services below will experience extended outages as the servers that host them are upgraded and reconfigured: downloads.digium.com downloads.asterisk.org bamboo.asterisk.org packages.asterisk.org svn.digium.com svn.asterisk.org issues.asterisk.org reviewboard.asterisk.org wiki.asterisk.org code.asterisk.org We apologize for any

Between 10:00AM and 10:00PM CST on Saturday, November 13, the services below will experience extended outages as the servers that host them are upgraded and reconfigured: downloads.digium.com downloads.asterisk.org bamboo.asterisk.org packages.asterisk.org svn.digium.com svn.asterisk.org issues.asterisk.org reviewboard.asterisk.org wiki.asterisk.org code.asterisk.org We apologize for any

Hello to all. I''m setting up a high capacity farm that''s going to allow many departments of a company or project have their own resources. I have little to no control over the brand of CPU (I would have much preferred AMD) and name brand of the gear, but I do get some input on what goes in each node. They are dell Power Edge 2950''s, found here :

Send CentOS-announce mailing list submissions to centos-announce at centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request at centos.org You can reach the person managing the list at centos-announce-owner at centos.org When