Re: [LARTC] HOWTO unmaintained?

2005-10-05 Thread Stephen Hemminger
On Wed, 05 Oct 2005 16:18:24 -0700
noc ops <[EMAIL PROTECTED]> wrote:

> Does anyone know where we stand with lartc howto?
> 
> 
> regards,
> /virendra
> 
> Stephen Hemminger wrote:

The new wiki 
http://linux-net.osdl.org
is available and you are welcome to put it there.
___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc


[LARTC] Error in "15.10 Example of full nat solution with QoS"?

2005-10-05 Thread Sean Dwyer
Near the end of section 15.10, the following commands are shown for 
prioritizing SYN packets:

   iptables -t mangle -I PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN 
-j MARK --set-mark 0x1
   iptables -t mangle -I PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN 
-j RETURN

Shouldn't the "-I" option really be "-A"? Like so:

   iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN 
-j MARK --set-mark 0x1
   iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN 
-j RETURN

Won't using "-I" cause these entries to be inserted at the top of the chain, 
putting the RETURN before the MARK is set? Maybe I'm missing something.

___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc


[LARTC] Two linux routers with DSL

2005-10-05 Thread Eduardo Fernández
Hi all!

I've the following config:

[LAN] - [big router] - [dsl router] - [internet]

Big router is a dedicated computer running linux, dsl router is a
small device running linux embedded (busybox) and connected to the
internet via pppoa. Both routers are connected together via ethernet.
I want to reduce as much as possible the load in the dsl router, so
I'd like the big router to do NAT. How should I configure both
routers?

Thank you very much for your help!

Eduardo Fernández
___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc


Re: [LARTC] HOWTO unmaintained?

2005-10-05 Thread noc ops
Does anyone know where we stand with lartc howto?


regards,
/virendra

Stephen Hemminger wrote:
> On Thu, 18 Aug 2005 14:00:30 +0100
> Ed W <[EMAIL PROTECTED]> wrote:
> 
> 
I wonder if someone would host a mediawiki and consider uploading the 
documentation there.  This would make it easier for people to 
contribute, and I think it shold be fairly easy to convert from it's 
current format to a wiki

   

>>>
>>>Good idea, I'll see if the OSDL will put up a wiki for it
>>>on developer.osdl.org, stay tuned.
>>> 
>>>
>>
>>Can I suggest that you look very hard at Mediawiki (ie as per 
>>wikipedia).  It's built for scalability, is really easy to edit, very 
>>actively maintained, and has all the distributed stuff built in if you 
>>really needed to spread the load over several machines.  All in all a 
>>very grown up documentation tool.  Oh and it's also multi-lingual so it 
>>might also be possible to use it to help with the translation issues
>>
>>I mainly mentioned it because I'm sure there are some tools for 
>>converting the current lartc faq up to the wiki format and obviously 
>>that's the first main step.
>>
>>If someone will host it then I have some experience maintaining a 
>>mediawiki site and could probably help out some
> 
> 
> Okay, if the lartc.org guys don't pick it up, I'll setup a mediawiki
> when I get back from holiday.  For an example see:
>   http://wiki.linux-nfs.org
> 
>   
> ___
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
> 


___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc


[LARTC] Re: [ANNOUNCE] iproute2 version (050929)

2005-10-05 Thread Stephen Hemminger
On Sat, 1 Oct 2005 23:34:25 +0200 (CEST)
Krzysztof Oledzki <[EMAIL PROTECTED]> wrote:

> 
> 
> On Fri, 30 Sep 2005, Stephen Hemminger wrote:
> 
> > There is an new minor update to iproute2 utilities available:
> > http://developer.osdl.org/dev/iproute2/download/iproute2-050929.tar.gz
> 
> 
> It hangs on "ip rule flush". Tested on 2.6.13.2.
> 
> 
> Best regards,
> 
> 
>   Krzysztof Olędzki

Fixed by this patch (in next release)

==

When assigning an ip address to an ethernet adapter, the newest 
(050929) version of 'ip addr' hangs while older versions worked. 
The problem was traced to be a removed initialisation. The patch 
below corrects this problem.

Regards,
Jerome Borsboom

--- iproute2-050929/lib/libnetlink.c2005-09-21 21:33:18.0 +0200
+++ iproute2-050929/lib/libnetlink.c2005-10-04 13:42:30.0 +0200
@@ -235,7 +235,10 @@
unsigned seq;
struct nlmsghdr *h;
struct sockaddr_nl nladdr;
-   struct iovec iov;
+   struct iovec iov = {
+   .iov_base = (void*)n,
+   .iov_len = n->nlmsg_len
+   };
struct msghdr msg = {
.msg_name = &nladdr,
.msg_namelen = sizeof(nladdr),

-- 
Stephen Hemminger <[EMAIL PROTECTED]>
OSDL http://developer.osdl.org/~shemminger
___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc


Re: [LARTC] iproute2-050929 ERORR compiling

2005-10-05 Thread Stephen Hemminger
On 05 Oct 2005 09:47:43 +0200
Krzysiek <[EMAIL PROTECTED]> wrote:

> > There are two different problems. The first is arpd needs the dbm library
> > (usually dbm-devel on most distros). Or you can just ignore the problem
> > if you don't run arpd
> > 
> > The second is problems with building the new ematch grammar stuff. I
> > don't
> > have an easy fix for this, but you could try a newer version of
> > bison/flex.
> 
> There is easy workaround regarding flex. The newest version doesn't work. I 
> had the same problem - and i had recent versions of flex, bison etc. It works 
> if you remove recent flex and install older vesion: 
> http://prdownloads.sourceforge.net/lex/flex-2.5.27.tar.bz2?download

There was some discussion with the Redhat and Suse maintainers when
Thomas added the ematch stuff. The problem is that the new flex is not
backwards compatible, so the distro's aren't switching yet.
___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc


Re: [LARTC] ip address delete bug?

2005-10-05 Thread Carl-Daniel Hailfinger

jamal wrote:

On Tue, 2005-04-10 at 23:08 +, Alexey Toptygin wrote:


On Wed, 5 Oct 2005, Carl-Daniel Hailfinger wrote:


[..]

Normally, I would add the new IP to eth0, start another ssh to the new IP, 
log out from the session to the old IP, remove the old IP from eth0 and be 
done. If I want the server to be reachable under both IPs during a transition 
period, I can delay deletion of the old IP until later.


Then I guess the question is: does anything in common use depend on the 
old behavior?


There's a new feature in newer kernels which allows for an alias to be
upgraded to become primary when you delete the primary. You need to
configure the sysctl otherwise it defaults to purging all the
secondaries when you delete the primary.


Thanks for that feature! Just looked at
/proc/sys/net/ipv4/conf/*/promote_secondaries
and it is the feature I was looking for. Merged in 2.6.12, if anyone 
reads this in a mail archive and wonders whether he has to upgrade.



This leads to another question: Can I manually promote a secondary 
address to become primary without deleting the primary? This would help 
me to use the new address by default during the transition period.




What it sounds like is you need to have ssh run over SCTP instead of TCP
to allow multi-homing. 


Maybe, but I did not find any current openssh version with sctp support. 
And with promote_secondaries, my original problem is solved perfectly.



Regards,
Carl-Daniel
--
http://www.hailfinger.org/
___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc


Re: [LARTC] iproute2-050929 ERORR compiling

2005-10-05 Thread Krzysiek
> There are two different problems. The first is arpd needs the dbm library
> (usually dbm-devel on most distros). Or you can just ignore the problem
> if you don't run arpd
> 
> The second is problems with building the new ematch grammar stuff. I
> don't
> have an easy fix for this, but you could try a newer version of
> bison/flex.

There is easy workaround regarding flex. The newest version doesn't work. I had 
the same problem - and i had recent versions of flex, bison etc. It works if 
you remove recent flex and install older vesion: 
http://prdownloads.sourceforge.net/lex/flex-2.5.27.tar.bz2?download

Krzysiek


___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc