similar to: One-to-One NAT

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I''ve a problem on the broadcast it is adding some additional route to the router which caused me some problem... Below is my /etc/shorewall/interface swtmng1 eth0.1 202.73.10.127 norfc1918 apmng1 eth0.10 202.73.8.7 norfc1918 dist1 eth0.1000 202.73.11.255 norfc1918,nobogons idc1 eth2.50

Hi, I want to configure QoS in my shorewall conf but I have a doubt. Now I am using tcrules with prerouting and with the file providers, like this. 2:P 192.168.0.11 0.0.0.0/0 tcp 25 So, with this way I route my smtp traffic with my provider number 2. Well, now I want to configure QoS with tcclasses and tcdevices, but if I do that I need to use the MARK in the tcclasses So, how

(non-subscriber -- please CC: any responses to me, thanks.) I need to have port forwarding to an external interface''s IP address enabled from the behind the firewall, but I don''t want all internal traffic routed through the firewall as per http://www.shorewall.net/FAQ.htm#faq2a , just the traffic to two ports. Is there any way to do this? (I know this is more properly handled

Hi, I had successfully setup my bridge (br0) but after few minutes the br0 interface seems not working. ifconfig eth0 0.0.0.0 ifconfig eth5 0.0.0.0 brctl addbr br0 brctl addif br0 eth0 brctl addif br0 eth5 brctl stp br0 on I check on my system's /var/log/syslog file. It shows something strange messages as below: - Jan 2 10:44:22 fw01 kernel: ipt_tcpmss_target: bad length (64 bytes)

I have a setup with two Internet providers. One circuit (net0 == eth1) is used primarily for employees and tunnels to other sites. The other (net1 == eth2) is for the production machines that customers access. Everythung works in teh sense that packets get to where they are sent (mostly) but I recently I had a sniffer on the system and noticed a problem I cannot solve. traffic coming in

Hi, i have a question if linux is able to do the same thing that commercial wan simulators do (which cost 7000 $ or more). Basicly i want to use the following setup. Linux Router Machine 192.168.0.1 192.168.1.1 Eth0 192.168.10.1 Eth5 192.168.2.1 Eth1 192.168.100.1 WEB Server. 192.168.3.1 Eth2

Hi, I''ve defined a hash like so in my nodes.pp: net::addr { "eth5": rt => { rt1 => { address => ''192.168.10.0'', netmask => ''255.255.255.0'', gateway => ''192.5.28.19'', src =>

Hello newsgroup, I hope somebody with more routing experience then me can help me with the problem I have. The setup is as described below. A dual internet provider routing, multiple local area networks, and a dmz network with one public and one private ip range. I followed the instructions at lartc.org, and so far everything is working. The default route is via

Hi, Shorewall version -4.0.12-2 (EL5 rpm version) OS : Centos 5.2 I have shorewall successfully running on Linux with multi ISP. Trying to make services such as "rsync, ftp" go through my secondary ISP. For which I did the following eth0 : Internal LAN eth4 : DSL (Second ISP) => x.x eth5 : T1 (First ISP) => y.y Created the following entries in

Hi all, I have one bridge system (used for controlling bandwidth) connected to three different DSL ISP provider. I have the following setup below: - +-------------+ | br0 | | -> eth1 | -> DSL_1 | -> eth2 | +-------------+ | br1 | | -> eth3 | -> DSL_2 | -> eth4 | +-------------+ | br2 | | -> eth5

Hi all, I''m trying to set up a computer with 2 routes to the internet, much as described at http://lartc.org/howto/lartc.rpdb.multiple-links.html .One of my interfaces (eth5, 192.168.2.2) is only used for traffic originating inside the network. The other (eth1, 192.168.1.2) is only used for a VPN, where all (udp) traffic originates from outside our network. I have created a second

Hello, I''m using tc to limit the bandwidth of our wireless customers. I have a working script, but I''m not happy with it. I''m trying to write a more sophisticated script, but when I run it, it give me this error: RTNETLINK answers: File exists I have no idea what this error means or how to fix it. Here is a portion of the script (the whole script shapes several

Hi, I met a problem when using bridge with netfilter. The kernel version 2.4.20, and the patch is bridge-nf-0.0.10-against-2.4.20.diff. Our firewall configuration is as follows, eth3,eth4,eth5,eth6 configured as a bridge with an IP address 10.0.0.1. The local net connect to the internet via the gateway 10.0.0.1 and SNAT is applied on the firewall. It worked but sometimes there are some

Hello all, I would like to connect two IPv4-only networks through global IPv6-only network with tinc. Could anyone tell me how to configure tinc.conf and the other config files? Thanks in advance, Ichiro Tinc: Discussion list about the tinc VPN daemon Archive: http://mail.nl.linux.org/lists/ Tinc site: http://tinc.nl.linux.org/

Our users are experiencing some unacceptable delay when trying to have a conversation. The delay is so noticeable that they keep stepping on each others words and resort to calling the customers via cell phone. Here is the setup SDSL Connection (PPPoA) Speedtouch 610 SDSL Modem 3Com 2224PWR Plus Switch (phones on separate VLAN) 8 Cisco 796 Phones All connecting to a remote Asterisk Server. We

On Mon, Jul 10, 2023 at 12:20:01PM +0300, Gavin Li wrote: > Currently, coalescing parameters are grouped for all transmit and receive > virtqueues. This patch series add support to set or get the parameters for > a specified virtqueue. > > When the traffic between virtqueues is unbalanced, for example, one virtqueue > is busy and another virtqueue is idle, then it will be very

All, I've got a machine running CentOS 5.3 and this machine has got 2 - built-in 1 Gig NICs and a expansion card with 4 - 100 Meg NICs. For whatever reason at install time, it made the expansion card eth0 through eth3 and the internal ports eth4 and eth5. And by default the 'machine' is known on the network by the eth0 NIC, so my throughput is limited to 100 Mb. How can I force

On Thu, 13 Jul 2023 07:40:12 -0400, "Michael S. Tsirkin" <mst at redhat.com> wrote: > On Mon, Jul 10, 2023 at 12:20:01PM +0300, Gavin Li wrote: > > Currently, coalescing parameters are grouped for all transmit and receive > > virtqueues. This patch series add support to set or get the parameters for > > a specified virtqueue. > > > > When the

hi, I have to configure Xen server and DomU''s which should be able to talk to different vlans - depending on services put on DomU''s. I would like to enslave 2 NICs via bond interface. Both NICs are on trunk ports which are configured in the same way, the same native vlan. I don''t know, if I have to add vlans tagging to eth* interfaces then enslave tagged eth*

I have two DELL servers with two Ethernet ports in it. Bith servers have CENTOS 4.5 installed. First Ethernet port connect to public Ethernet line and work correctly. Second Ethernet port I connect point-to-point as private Ethernet (cable direct connect without router or switch). Private Ethernet use IP asddress 1.1.1.1 and 1.1.1.2. I check "ifconfig -a" and both eth0 and eth1 are