[LARTC] SQLiaison E-Mail Virus Alert

2005-02-03 Thread techsupport



SQLiaison Mail Server: GroupShield Alert
 
The email server has discovered a problem with the following email.
Please note that the sender of the email will not be 
notified with this message.
 More information :

Date/Time sent: 03 Feb 2005 06:15:50
Subject line: [LARTC] Delivery by mail
From: [EMAIL PROTECTED]
To: LARTC
Action taken: Deleted
Virus Found: W32/[EMAIL PROTECTED]
Reason: Anti-Virus
Rule Group: 


For additional information, please contact SQLiaison 
Support Team

[EMAIL PROTECTED]



[LARTC] TOS for IPv6 traffic in a tunnel

2005-02-03 Thread Matthias Wimmer
Hi!

I searched the internet but did not find any results yet. Maybe here is
someone that might help me.

Is it possible to use the traffic class of an IPv6 packet to set the TOS
value of a wrapping IPv4 packet, that will transport the IPv6 packet
through a tunnel?

I am asking this because I want to extend the traffic classes I am using
on my DSL link to also classify IPv6 packets correctly that are routed
through a tunnel over this DSL link.

Another question: Is it possible that ssh/scp set the traffic class of
IPv6 packets? The class seems to be 0x00 for both applications while
with IPv4 connections I see different ToS values for both.


Thank you!
Matthias

-- 
Fon: +49-(0)70 0770 07770  http://web.amessage.info
Fax: +49-(0)89 312 88 654  xmpp:[EMAIL PROTECTED]


signature.asc
Description: Digital signature


[LARTC] bandwidth for each individual IP

2005-02-03 Thread Ionut Gogu



Hello!
I'm using a Slackware Linux as a router and 
50 IP addresses for my LAN Clients.Is there any program i can 
install that will be able to tell me:
 how much   (ie. kbps) each 
individual IP is using at moment t?


Re: [LARTC] bandwidth for each individual IP

2005-02-03 Thread Nikolay Datchev
http://www.ex-parrot.com/~pdw/iftop/
-- Nikolay Datchev
On Thu, 3 Feb 2005, Ionut Gogu wrote:
Hello!
I'm using a Slackware Linux as a router  and  50 IP addresses for my LAN 
Clients.
Is there any program i can install that will be able to tell me:
 how much  (ie. kbps) each individual IP is using at moment t?
___
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


Re: [LARTC] What does flowid:1 mean here?

2005-02-03 Thread Stef Coene
On Thursday 03 February 2005 07:11, CcM wrote:
 Hi,
  I got the following lines from 'Linux Advanced Routing  Traffice
 Control HOWTO' and got confused!

  iptables -A PREROUTING -i $INDEV -t mangle -p tcp --syn \
  -j MARK --set-mark 1
  tc qdisc add dev $INDEV handle : ingress
  tc filter add dev $INDEV parent : protocol ip prio 50 handle 1 fw
 \ police rate 1kbit burst 40 mtu 9k drop flowid :1

  Does the second command mean that the filter will police the traffic
 of syn to 1kbit by dropping? What does flowid:1 mean here?
It means that all traffic that's under 1kbit, will be send to class :1 (or 
long notation: :1).  All traffic above 1kbit will be dropped.


Stef
___
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


Re: [LARTC] bandwidth for each individual IP

2005-02-03 Thread Paweł
Dnia czwartek 03 luty 2005 14:08, Ionut Gogu napisa:
 Hello!
 I'm using a Slackware Linux as a router  and  50 IP addresses for my LAN
 Clients. Is there any program i can install that will be able to tell me:

   how much  (ie. kbps) each individual IP is using at moment t?

Try jnettop.
___
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


[LARTC] why fwmark don't work

2005-02-03 Thread saz



Hi guys im trying to make a port redirecction using 
iproute together with iptables mangle option .. but for some strange reason is 
not working yet, I know i can doit in a diferent way, but the idea is 
using packet marking and redirect the packetswith a rule.

I have two computers PC1 and PC2

PC1: 192.168.0.1 this is the one connected to 
internet, and this machine make the redirection
PC2: 192.168.0.2 this is the smtp 
server

So this is what i do in 
PC1:

first i mark all the packets incoming for 25 
portwith "1":

iptables -t mangle -A PREROUTING -p tcp 
--dport 25 -j MARK --set-mark 1

then i create a table called smtp:

echo 200 smtp  
/etc/iproute2/rt_tables

after that i set PC2 as default via for my smtp 
table:

ip route add default via 192.168.0.2 table 
smtp

and finally i make the rule for smtp 
table

ip rule add fwmak 1 table 
smtp

this would have to work, but is not redirecting 
nothing...

i can see that is making the packets with 1 using 
the command iptables -t mangle -L PREROUTING -v but is not 
working, any one can help me?


Re: [LARTC] bandwidth for each individual IP

2005-02-03 Thread [EMAIL PROTECTED]
Ionut Gogu wrote:
Hello!
I'm using a Slackware Linux as a router  and  50 IP addresses for my 
LAN Clients.
 Is there any program i can install that will be able to tell me:
 
  how much (ie. kbps) each individual IP is using at moment t?
salut,  :)
u can use tcptrack, supports libcap expressions , as i am sure iftop 
does too, as i see based on libcap, never tested it alltho' ... but 
preparing for ... :)
tcptrack is a robust application, responds very quickly to kernel load 
from network traffic, myself using it for network monitoring and audit 
for more than 62 workstations, libcap expressions  filtering are less 
complicated than tcpdump based ones, other words looks good, works good.

http://www.rhythm.cx/~steve/devel/tcptrack/
___
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


[LARTC] best patch for iptables ratelimiting

2005-02-03 Thread Ray Charles


According to the F.A.Q. there's a patch to do
ratelimiting:
http://etudiant.univ-mlv.fr/~jpetazzo/bytelimit.tgz

Going with the thought that this is current..I tried
it.

I wasn't able to get it to compile, as support for
invert was causing a failure(i think). But i was able
to get it to compile when I changed line 73 and my box
loaded the module. 

Anyone know if this will do ratelimit based on
sessions? or based on bandwidth? I am partial to doing
ratelimit based on sessions. 


Thanks- 
Ray



__ 
Do you Yahoo!? 
Take Yahoo! Mail with you! Get it on your mobile phone. 
http://mobile.yahoo.com/maildemo 
___
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


Re: [LARTC] Issue with using using tc api

2005-02-03 Thread Stephen Hemminger
On Thu, 03 Feb 2005 11:43:40 +0800
sanjeev ravindran [EMAIL PROTECTED] wrote:

 Thank you so much for ur response Stephen,
 
 Ya, I found that dlopen tries to load q_htb.so.. and it fails.. 
 I tried to locate q_htb.so in my rh9 machiene.. but i couldnt locate it..
 Could you let me know how build q_htb.so standalone ??
 Thanks in advance,
 With best regards,
 Sanjeev Ravindran

Something like:
gcc -D_GNU_SOURCE -O2 -Wstrict-prototypes -Wall -g -I../include \
 -DRESOLVE_HOSTNAMES -DCONFIG_GACT -DCONFIG_GACT_PROB -shared -fpic q_htb.c -o 
q_htb.so

The tc/Makefile shows how it is done for q_netem.so

___
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/