gateway-tc-nat-iptables-userstats - v 2
That's it, it's work ;) I donwload this : http://freshmeat.net/projects/linux-qnet/?branch_id=51402&release_id=169937 and now i have all that i need - - iptables patch-o-matic-ng for limiting connections per ip - iptables-p2p - now i can cut p2p in work time - and the imporant thing esfq, and wrr I use out old scripts : - iptables scripts - INPUT,OUTPUT,FORWARD chains, connections limit per ip, packet mark for international/peering traffic - tc script based on htb/wrr with class for every internal ip, classes for priority international, prioriry peering, class for out provider servers unshaped / 80MBs, and HTB for outgoing traffic, class for insite servers - mail,dns,web - auto nat-ing scrpit for adding internal hosts for useing i-net service based on dns,wins,smb,ping lookup - web statistic script with international/peering traffic per ip and additional statistic with wipl-daemon package. After few weeks i'll publish all conf files and scripts for use. And my old decision for rebuilding the machine was kernels 2.4.22, 2.4.26 Oops-ing because many WRR-classes ;), but now with 2.6.8.1 i think the prbolem is gone. That's it, Debian/GNU Linux RULEZ ! -- Konstantin Kostadinov Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc --- Q: What is printed on the bottom of beer bottles in Minnesota? A: Open other end. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: gateway-tc-nat-iptables-userstats - v 2
Tanx Arnt, i download it now, and i'll check it. > > > G'day, > > > > From: "Konstantin Kostadinov" <[EMAIL PROTECTED]> > > > i need to rebuild our gateway machine, and the services that is > > > needed are : > > > traffic shaper [ in/out/interactive/icmp packets class,priority > > > group], firewall rules, and some user stats. > > > > > > so my question is if anybody knows ready for use project with > > > simular futures to share it. > > > > I use shorewall + wondershaper. Wondershaper is probably not exactly > > what you are after, but it would make an OK starting point, and > > shorewall has hooks for fancier traffic shaping. > > ..those hooks may be usable with my > http://fmb.no/ipcop/setup-cbq-0.0.5.tar.bz2 , is used to throttle > bandwidth for my isp (and) client. Bash script, it builds cbq rules, > which needs to be compiled with 'cbq compile', it _could_ use > a nice, say, web interface or somesuch. ;-) > > > I am not sure what would be best for user stats... it probably depends > > if you are using radius or not. > > > > > > Donovan Baardahttp://minkirri.apana.org.au/~abo/ > > > > > -- > ..med vennlig hilsen = with Kind Regards from Arnt... ;-) > ...with a number of polar bear hunters in his ancestry... > Scenarios always come in sets of three: > best case, worst case, and just in case. > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- Konstantin Kostadinov Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc --- "Not Hercules could have knock'd out his brains, for he had none." -- Shakespeare -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: gateway-tc-nat-iptables-userstats - v 2
Tanks Donovan, i read wondershaper info, it is good for starting point, and for stats i mean internal hosts [ lan ], for radius we have other billing system ;-) tanx a lot > G'day, > > From: "Konstantin Kostadinov" <[EMAIL PROTECTED]> > > i need to rebuild our gateway machine, and the services that is needed > > are : > > traffic shaper [ in/out/interactive/icmp packets class,priority group], > > firewall rules, > > and some user stats. > > > > so my question is if anybody knows ready for use project with simular > > futures to share it. > > I use shorewall + wondershaper. Wondershaper is probably not exactly what > you are after, but it would make an OK starting point, and shorewall has > hooks for fancier traffic shaping. > > I am not sure what would be best for user stats... it probably depends if > you are using radius or not. > > > Donovan Baardahttp://minkirri.apana.org.au/~abo/ > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- Konstantin Kostadinov Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc --- You may worry about your hair-do today, but tomorrow much peanut butter will be sold. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
gateway-tc-nat-iptables-userstats - v 2
Hi Again Folks, ;-), sorry i hit the enter by mistake and the previous message is incomplete ;-( Here is the case : i need to rebuild our gateway machine, and the services that is needed are : traffic shaper [ in/out/interactive/icmp packets class,priority group], firewall rules, and some user stats. so my question is if anybody knows ready for use project with simular futures to share it. tanx -- Training is everything. The peach was once a bitter almond; cauliflower is nothing but cabbage with a college education. -- Mark Twain, "Pudd'nhead Wilson's Calendar" -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
gateway-tc-nat-iptables-userstats
Hi Folks, Here is the case : i need to rebuild our gateway machine, and the services that is needed are : -- Training is everything. The peach was once a bitter almond; cauliflower is nothing but cabbage with a college education. -- Mark Twain, "Pudd'nhead Wilson's Calendar" -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: imap before smtp grace period timeout ???
> but not practical. btw, you can check courier's config settings for a > much more interesting/exotic method, sending mail via imap. if you so > desperately want to live (in) interesting times. I will danke -- Konstantin Kostadinov Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc --- Extreme fear can neither fight nor fly. -- William Shakespeare, "The Rape of Lucrece" -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: imap before smtp grace period timeout ???
> Use authentication for smtp. (username/ password) > > Almost all email clients support it. > > Regards > > Andrew Oo yes i know this way but the other is interesting ! :) > On 15.07.2004, at 16:09, Konstantin Kostadinov wrote: > > > Hi All > > > > I'v the problem with courier-imapd and pop-before-smtp sync :-) > > > > So my pop-before-smtp give 30m grace period for smtp sending. > > > > Users mail client is set to use IMAP and after login the imap session > > stays active and do not reconnect, pop-before-smtp timeouts after 30m > > and the client cannot sends email until reopen email client and imap > > reconnect to server. > -- Konstantin Kostadinov Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc --- Things will be bright in P.M. A cop will shine a light in your face. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
imap before smtp grace period timeout ???
Hi All I'v the problem with courier-imapd and pop-before-smtp sync :-) So my pop-before-smtp give 30m grace period for smtp sending. Users mail client is set to use IMAP and after login the imap session stays active and do not reconnect, pop-before-smtp timeouts after 30m and the client cannot sends email until reopen email client and imap reconnect to server. Is there any resolving for this problem ? tanx Konstantin Kostadinov Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc --- BOFH excuse #433: error: one bad user found in front of screen -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: backup script
On Wed, 10 Mar 2004 11:06:42 +0200
Alexandros Papadopoulos <[EMAIL PROTECTED]> wrote:
> On Wednesday 10 March 2004 09:29, Craig Schneider wrote:
>
> > Just battling to use awk to extract the last for collumns.
> >
> > -rwxrwxr-x 1 root root [ 234 Mar 10 06:38 backup ]
> >
> > Any help would be greatly appreciated. Shell scripting is definitely
> > not one of my strong points.
try this :
ls -l | awk -F" " '{print $6, $7, $8, $9, $10}'
--
Konstantin Kostadinov
Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc
---
It may or may not be worthwhile, but it still has to be done.
Re: backup script
On Wed, 10 Mar 2004 11:06:42 +0200
Alexandros Papadopoulos <[EMAIL PROTECTED]> wrote:
> On Wednesday 10 March 2004 09:29, Craig Schneider wrote:
>
> > Just battling to use awk to extract the last for collumns.
> >
> > -rwxrwxr-x 1 root root [ 234 Mar 10 06:38 backup ]
> >
> > Any help would be greatly appreciated. Shell scripting is definitely
> > not one of my strong points.
try this :
ls -l | awk -F" " '{print $6, $7, $8, $9, $10}'
--
Konstantin Kostadinov
Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc
---
It may or may not be worthwhile, but it still has to be done.
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: squid-wccp-kernel-2.6
http://ftp.yars.free.net/pub/software/unix/platforms/linux/kernel/drivers/ip_wccp-for2.6.0.c > > echo 'obj-m := ip_wccp-for2.6.0.o' > Makefile > make -C /usr/src/linux SUBDIRS=$PWD O=$PWD V=1 modules > > Arkadiusz Mi¶kiewicz CS at FoE, Wroclaw University of Technology > arekm.pld-linux.org, 1024/3DB19BBD, JID: arekm.jabber.org, PLD/Linux that's it. if fire-up module compile after kernel build like that: - this is modules section in /usr/src/linux-2.6.3/.config # Loadable module support # CONFIG_MODULES=y CONFIG_MODULE_UNLOAD=y # CONFIG_MODULE_FORCE_UNLOAD is not set CONFIG_OBSOLETE_MODPARM=y # CONFIG_MODVERSIONS is not set CONFIG_KMOD=y - this is Arkadiusz's hint fo makefile compose: cd dir-with-ip-wccp-for2.60.o ; echo 'obj-m := ip_wccp-for2.6.0.o' > Makefile make -C /usr/src/linux-2.6.3 SUBDIRS=$PWD modules -- V=1 in Arkadiusz's hint is for verbose output. note: module must be compiled with kernel that we want to use with. e.g 2.6.x tanx a lot to everybody. oo and read in /usr/src/linux-2.6.x/Documentation/kbuild before google searches ;-) it helps very very ;)). -- Konstantin Kostadinov Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc --- The lunatic, the lover, and the poet, Are of imagination all compact... -- Wm. Shakespeare, "A Midsummer Night's Dream" -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
squid-wccp-kernel-2.6
hi folks, a week ago i try to switch our company web-cache on 2.6.2 kernel, we use some "cisco stuff" and ip_wccp module [ at now on 2.4 kernel ] for squid<->cisco router communication. i read "rtfm" ;) in cicso-squid.org for ip_wccp module compile for 2.6 kernels but the case that i heave is that i can't compile the module because 2.6 kernels schema i different from 2.4 kernels. i found one cisco module modified for 2.6 kernels too. in two words, i fight one day with it but .. ;) if someone run ip_wccp on 2.6 kernel i'll be very grateful for some know-how tanks -- Konstantin Kostadinov Public PGP : http://www.fadata.bg/pgp/konstantinpgp.asc --- Q: What's tan and black and looks great on a lawyer? A: A doberman. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: PLEASE HELP compiling courier-imap on woody
try this: remove all sources that you are downloaded and trying to compile. apt-get update apt-cache show courier - select your packages - example : apt-get install courier-authdaemon courier-pop - this will add you courier auth daemon and courier pop3 daemon edit the courer auth daemon config file and select your primary auth metod: vi /etc/courier/authdaemonrc > Please advise me on where i can tell the ./configure where to find the > libraries it requires ... > > I keep getting errors indicating that it needs that it cant find > libraries that i know are installed .. > > the latest > > " cannont find either gdbm or the db libraries " > > and any advice on setting up authmysql ?? > > as this is the only authentication i require .. > > Many thanks > > greg > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- Konstantin Kostadinov Fadata Ltd. --- Public PGP : http://www.fadata.bg/pgp/kostaspgp.asc --- pgpaWkgPKotfu.pgp Description: PGP signature
traffic shaper - full line load and user browse ?
Hi everybody I have the case: Internet line i full loaded, the user try to browse some site [squid-cache or not] and my browser [opera linux] count every site load before start to download site content between 8 or 10-15 seconds. We use HTB / VRR / SFQ on 2.4.20 So my question is : Is there some way to jump over this thing with some other TC/Q, OS [some of BSD distros], some corporate router [cisco or other BIG stuff] or simply fine tuning of our config. that's it tanx. -- Konstantin Kostadinov Fadata Ltd. --- Public PGP : http://www.fadata.bg/pgp/kostaspgp.asc --- pgpBnqd371YHs.pgp Description: PGP signature
Re: calculation of mail traffic
> Hi all, > > I'd like to calculate mail traffic on a per domain base. Calculation should > include mail sent and mail received. I've been thinking of using the message > id > as some sort of "key" for everything since it's supposed to be unique, right ? > > I've been searching for a ready made solution and haven't come accross > something, so I started working on a solution. > > > My current ideas: > - calculate traffic for each day (via cronjob) with traffic in/out per domain > - domains which this calculation should be done for are listed in > accounting_domains > > I've built a small example program (attached as example.pl) an example log > file > is also attached. > > > My knowledge of Perl is not quite well so I'm looking for help to archive the > goal of doing this calculation. Anybody out there for help ? :-) > > > > Kind Regards, > > Markus Welsch > If you use postfix u can try pflogsumm ;) -- Konstantin Kostadinov Fadata Ltd. --- Public PGP : http://www.fadata.bg/pgp/kostaspgp.asc --- pgpucc4WgH2D7.pgp Description: PGP signature
Re: calculation of mail traffic
> Hi all, > > I'd like to calculate mail traffic on a per domain base. Calculation should > include mail sent and mail received. I've been thinking of using the message id > as some sort of "key" for everything since it's supposed to be unique, right ? > > I've been searching for a ready made solution and haven't come accross > something, so I started working on a solution. > > > My current ideas: > - calculate traffic for each day (via cronjob) with traffic in/out per domain > - domains which this calculation should be done for are listed in accounting_domains > > I've built a small example program (attached as example.pl) an example log file > is also attached. > > > My knowledge of Perl is not quite well so I'm looking for help to archive the > goal of doing this calculation. Anybody out there for help ? :-) > > > > Kind Regards, > > Markus Welsch > If you use postfix u can try pflogsumm ;) -- Konstantin Kostadinov Fadata Ltd. --- Public PGP : http://www.fadata.bg/pgp/kostaspgp.asc --- pgp0.pgp Description: PGP signature
postfix+virtual+mail-notification Q?
Hi everyone My question is about postfix vitrual delivery and user mail notification. I don't want to forward all message contents to user cellular phone and the gsm operator to back me the message because it is too big. I read about biff but it is for local delivery only. Procmail is for local delivery too. If anybody knows the decision about this i'll be very happy to share with me. tanx. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: best NIC Speed
Yes intel nic are the best for 10/100 based lan. Some of the Pro100+ Card also have the problem - if the network equipment (switch) is powered off and on the card is light-up on half-duplex. Some old intel nic-s have transeever bug but in new in 2.4 kernels this is fixed on software level. for 3com nic's i have good word's too. there is 3com 10/100 For Complete PC Managment nic that is designed for performance, hi network load and low cpu ussage. If you by 3com card look their revision, do not take cards with "B" rev. they are old and have some low performace tips. > Hi > > for an high performace server i need to know what nic (in your opinion) is a nic >with an good trough put. > > right now i use > 3com (not cheap) > or > realtek (cheap) > > but normally cheap doenst mean to be slow. > > I use woody with the 2.4.18-686 kernel > > everything you know is welcome > > marco msg07722/pgp0.pgp Description: PGP signature
Re: Email Server Q.
Tanx for your assistance Brian. It was helpful for me. I build it on standart testing amavis-new and perl packages and now the "testing is in progress". If the trouble walk in my possessions i'll use your solution. And thank you again, your post is good. > [ I don't subscribe to debian-isp (yet), but a friend sent me > a copy of your E-Mail ] > > On Thu, Jan 09, 2003 at 12:22:16PM +0200, Konstantin Kostadinov wrote: > > Postfix+amavis+spamassassin+pop3+ssl work on package-base system with friendly >update. > > The problem is in testing. > > If some pack (perl,spamassasin,amavis) is go to upper versrion there is >probability the system stop because the version packs incompatibility. > > > > Amavisd file edit is needet because there is: "The changelog says it was disabled >because of error for some dependancies > > with perl 5.8 but in testing it is perl 5.6 (unlike unstable in 5.8)." > > The latest version available online my private website (use the > following apt-get line) does have spamassassin support. However, there > is a bug with certain combinations of perl and spamassassin that could > cause problems with the signal handling. I think perl in stable is OK, but > the recommended fix is spamassassin 2.43+patch or 2.50. > > deb http://www.microcomaustralia.com.au/debian/ stable main > > Also note that currently I am working on packaging a new version of > amavisd-new that is completely different to the current version. For the > newest version of amavis (now renamed amavisd-new): > > deb http://www.microcomaustralia.com.au/debian/ unstable main > > (note: I made no guarantees there will be a clean upgrade from > this version; I am still discussing these details with Henrique > who has volunteered to help with the packaging efforts). > > Hope this helps. > -- > Brian May <[EMAIL PROTECTED]> > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > msg07721/pgp0.pgp Description: PGP signature
Re: Email Server Q.
Ok that is realy very woefully, i have research in google and similar search engines and what ? well there is no good package-based solution for woody for email server on postfix, antivirus, spamassasin ? after postfix and amavis install and configure on woody still remain spamfilter solution system install and config but the methods are old-style school with hand-made fight's, scripts etc. Yes but this way in my opinion is unacceptable for production system. Production system needs update ? and if i build half of the components on-hand update will be very interesting point. So i migrate from stable/woody to testing. Install postfix-packs,corurier-pop-ssl,amavis-new,spamassasin. After amavisd edit -- http://archives.neohapsis.com/archives/postfix/2002-11/0077.html the thing is go to work. Postfix+amavis+spamassassin+pop3+ssl work on package-base system with friendly update. The problem is in testing. If some pack (perl,spamassasin,amavis) is go to upper versrion there is probability the system stop because the version packs incompatibility. Amavisd file edit is needet because there is: "The changelog says it was disabled because of error for some dependancies with perl 5.8 but in testing it is perl 5.6 (unlike unstable in 5.8)." so that's it Sorry if my words sounds cheekily. On Wed, 8 Jan 2003 16:32:50 +0100 Felix Erkinger <[EMAIL PROTECTED]> wrote: > On Wed, Jan 08, 2003 at 01:17:52PM +0200, Konstantin Kostadinov wrote: > > I'm now building email server and my questions in that moment are: > > what distro to use ?, > I'm currently having a similar situation, with slightly different > flavor, and i also dont know which would be best (or at least > working...) > > My situation: > .) A volume of 30/30 Emails (not counting spam or similar) send and > recieved per day. > .) all emails (incoming/outgoing) are stored for searching > purposes. > .) all mails should be on the server, accessed via IMAP > .) Capable to do a fulltext-search via WEB-Interface, of non/english > (latin1) and similar encoding-types. > .) spam and virus checking (spamassassin & amavis-ng ?) > .) Access should not slow down to much after a couple of months (~1800 > Mails per year, to be accessable) > .) a little bit of user-masquerading on outgoing mails. > .) Plenty of hardware ressources (new machine with 1GB Ram & 1,5 Ghz > CPU) but also doing other stuff. > > Postgresql and mnogosearch with antiword and others are > currently under testing, to index word/rtf/dos-word documents > with non english encoding from 1995 until now, > > so i would prefer a sql-database in the background, but if maildir or MH > boxes would do the same thing without slowing down after a couple of > hundred mails in one box, its fine with me. > > also, the mails stored in whatever format should be backuped every day > in the night, so hopefully it should be possible to extract everything > needed to a 4 Gig Dat-Tape (document-archiv & mail-archiv, but not the > indexes or other junk from the database to keep it small) > > exim, postfix, qmail, courier ? > amavis and spamassassin ? > > > Many thanks in advance, > Felix Erkinger > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > > msg07706/pgp0.pgp Description: PGP signature
Re: Email Server Q.
>On Wed, 8 Jan 2003 12:50:05 +0100 >Russell Coker <[EMAIL PROTECTED]> wrote: > On Wed, 8 Jan 2003 12:17, Konstantin Kostadinov wrote: > > what distro to use ?, i use woody but is this the right choice ?, if i use > > testing or unstable is there better for config and update > > MTA,AntiVirus,Antispam,LDAP,Webmail packages found ? > > Unstable has newer versions of some of this software. Newer Postfix, newer > Apache, newer PHP, and newer anti-virus software. We are still getting new > versions and new applications included in unstable (and they move a week or > so later to testing). Yes the packages are new and the update if faster than stable but what about security in sid ? And is a good idea to update main email server daily ? > But woody generally works well and isn't as likely to have bugs that affect > you... > > > For WebMail - sqwebmail and postfix-snap-ldap. > > I suggest considering IMP. According to my colleagues IMP has more features, > although it requires a lot more CPU power to run it. Tanks I'll try it, it seems that this is better than sqwebmail. Hardware on PC that will be mail server is pIII 1GHz 512Ram 2x8GB SCSI with 200-300 users, i thing that the machine will survive with IMP on it ? msg07693/pgp0.pgp Description: PGP signature
Email Server Q.
I know that the topic is discussed many times but i want to ask again. I'm now building email server and my questions in that moment are: what distro to use ?, i use woody but is this the right choice ?, if i use testing or unstable is there better for config and update MTA,AntiVirus,Antispam,LDAP,Webmail packages found ? I want to know what distro and packages are used for "murphy.debian.org" - this mashine is legendary for me ;) After research in isp deb. list i found that the good configuration is postfix+courier-pop3-ssl of cource amavis-postfix and some antispam solution but i do not know what to use (antispam). For WebMail - sqwebmail and postfix-snap-ldap. In Woody the pipe between amvis-postfix and the postfix is realy big-bad-work :( If someone have the right master.cf posfix snapshot config file configured for amavis-postfix for woody and want to share it i'll be very grateful. So in two words my Q. is what packs is good idea to fight with ;) And one lateral question. - some good packs for statistic per user for lan gateway for internet traffic ? thanks msg07691/pgp0.pgp Description: PGP signature
