similar to: [Bridge] Transparent shaper with 2.6 kernel

Hi all, The patch below does four trivial changes and one big change Trivial changes, these are all in br_netfilter.c: - check ar_pln==4 when giving bridged ARP packets to arptables - delete unnecessary if in br_nf_local_in - add more logging for the "Argh" message - add some brag-comments in the file head comment Big change: let {ip,arp}tables see VLAN tagged {I,AR}P packets. This

Hello, I have a transparent bridge/firewall setup using linux-2.6.3. My iptables commands for the firewall seem to work fine, but my tc traffic shaper rules dont. The tc rules seem to apply ok, but have no effect. Here are my tc rules. Basically im just trying to limit each IP in my internal /24 to 512k of bandwidth in and out. DEV=eth0 tc qdisc del dev $DEV root tc qdisc add dev $DEV

I have seen and responded to many different bridging related firewalling questions as of late. There seems to be a common assumption that IPTables does not and / or can not see bridged traffic. This is not the case. If you enable the "Bridged IP/ARP packets filtering" (CONFIG_BRIDGE_NETFILTER) option IPTables can see and act on bridged traffic. If this is turned on and you have

Hi! The Netfilter project presents: arptables 0.0.5 arptables is the userspace command line program used to configure the Linux 2.4.x and later ARP packet filtering ruleset. It is targeted towards system administrators. NOTE: This is a release of legacy software. Patches may still be accepted and pushed out to the git repository, which will remain active and accessible as usual

Hi! The Netfilter project proudly presents: iptables 1.8.3 iptables is the userspace command line program used to configure the Linux 2.4.x and later packet filtering ruleset. It is targeted towards system administrators. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/iptables/downloads.html

At Mon, 28 May 2018 18:23:42 -0700 CentOS mailing list <centos at centos.org> wrote: > > On 05/28/2018 03:25 PM, Robert Heller wrote: > > I tried to run efibootmgr, but it wants a model named efivars loaded, but > > there is no such module available. > > That's interesting.?? Can you post the command and output where you see that? > > Also, post the

On 05/28/2018 06:58 PM, Robert Heller wrote: > At Mon, 28 May 2018 18:23:42 -0700 CentOS mailing list <centos at centos.org> wrote: >> On 05/28/2018 03:25 PM, Robert Heller wrote: >>> I tried to run efibootmgr, but it wants a model named efivars loaded, but >>> there is no such module available. > newserver.wendellfreelibrary.org% sudo efibootmgr > [sudo]

I have a machine running 2.4.25 w/ wrr, ebtables-brnf, iptables CLASSIFY and esfq patches (not using esfq, though). I have wrr set up, and within each class I want to prioritize ssh, web, etc..., but right now I am testing with pings. I have the following in my POSTROUTING mangle table: CLASSIFY icmp -- anywhere anywhere CLASSIFY set 0:6 I find that if I attach a prio

Hi, I was trying to mount a samba share from a host server using pam_mount module. This is my smb.conf for client machine and my pam-mount.conf.xml. [global] log level = all:10 security = ads # auth methods = guest sam winbind:ntdomain client ldap sasl wrapping = seal netbios name = STAT1 realm = EXAMPLE.EDU workgroup = WORKGROUP

On Fri, 15 Jun 2018 14:50:23 +0000 Suman Koirala <koiralasu at mnstate.edu> wrote: > > > Hi Rowland, > > I got permission denied messge when I tried to login mount. Could you > please help me to figure out the problem. I am using ubuntu 18.04 > for both server and client and samba 4.7.6. Thank You > > ________________________________________ > From: samba

Hi Dave, The patch below lets the bridge compile when CONFIG_BRIDGE_NETFILTER isn't enabled. This patch is an update of M.J. Miroslaw's patch that arrived through private mail. cheers, Bart --- linux-2.6.0-test10/net/bridge/br.c.old Wed Nov 26 01:28:16 2003 +++ linux-2.6.0-test10/net/bridge/br.c Wed Nov 26 01:31:54 2003 @@ -32,7 +32,7 @@ int (*br_should_route_hook) (struct sk_b

https://bugzilla.netfilter.org/show_bug.cgi?id=1239 Bug ID: 1239 Summary: Linux 3.2.0 kernel doesn't support ARPT_SO_GETINFO etc. queries any more Product: netfilter/iptables Version: unspecified Hardware: arm OS: other Status: NEW Severity: critical Priority: P5

On Sun, 2016-12-18 at 19:24 +0000, Jonathan Hunter via samba wrote: > Hi, > > Despite having used samba for many, many years, I have not built from > source on Debian before. CentOS, yes.. Raspbian, yes.. but not Debian > itself. > > I have installed Debian 8.6 from scratch: > newserver:~/download/samba-4.5.2$ cat /etc/debian_version > 8.6 > user at

On Sun, 18 Dec 2016 19:24:05 +0000 Jonathan Hunter via samba <samba at lists.samba.org> wrote: > Hi, > > Despite having used samba for many, many years, I have not built from > source on Debian before. CentOS, yes.. Raspbian, yes.. but not Debian > itself. > > I have installed Debian 8.6 from scratch: > newserver:~/download/samba-4.5.2$ cat /etc/debian_version >

At Tue, 29 May 2018 08:10:39 -0400 (EDT) CentOS mailing list <centos at centos.org> wrote: > > > At Mon, 28 May 2018 20:49:54 -0700 CentOS mailing list <centos at centos.org> wrote: > > > > > On 05/28/2018 06:20 PM, Robert Heller wrote: > > > The UUID in the BIOS is NOT VFAT volume. It is something completely > > > different. I have no

Hi! The Netfilter project proudly presents: iptables 1.6.0 This release includes accumulated fixes and enhancements for the following matches: * ah * connlabel * cgroup * devgroup * dst * icmp6 * ipcomp * ipv6header * quota * set * socket * string and targets: * CT * REJECT * SET * SNAT * SNPT,DNPT * SYNPROXY * TEE We also got rid of the very very old MIRROR and SAME targets and the

Hi, At http://sourceforge.net/projects/ebtables/ you can find the following new releases: ebtables-brnf-3-vs-2.4.22 Changes: - let iptables see VLAN tagged IP traffic - bugfix for queued packets that get mangled in userspace - ebt_among module (Grzegorz Borowiak) - ebt_limit module (Tom Marshall) The patch compiles but I've done no further tests, but I probably didn't screw up.

At Mon, 28 May 2018 20:49:54 -0700 CentOS mailing list <centos at centos.org> wrote: > > On 05/28/2018 06:20 PM, Robert Heller wrote: > > The UUID in the BIOS is NOT VFAT volume. It is something completely > > different. I have no clue what it is -- it does not correspond to anything I > > can find. > > > It should be the UUID of the partition, not of

https://bugzilla.netfilter.org/show_bug.cgi?id=1307 Bug ID: 1307 Summary: Implement interface for 'ipv4_addr' in arptables Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at

Hi All, By working on our bootstrap puppet scripts (executed wih standalone puppet), I found a difference between pipe and file parsing : A simple file with a content : $ cat withdollar.pp file { "/tmp/withdoller.txt": content => ''something like echo $1'' } When puppet parses the file : $ puppet withdollar.pp notice: