[LARTC] Re: PPPoE and shaping
Diego Giardinetto [EMAIL PROTECTED] wrote: 2. my server do masquerading and exit in internet via a PPPoE connection Goals: 1. not use SQUID 2. shaping the traffic with classes 3. emule connection must have minimum priority and a band-limit of 10KBytes/s in uplink (server---internet) You say PPoE: I assume you are talking about an ADSL not SDSL connection. If so, the ADSL-optimizer package by Jesper is the technologically most advanced solution: http://www.adsl-optimizer.dk/ (at least it was when I last checked) I have been running it for months now without the slightest hitch. (With the patches from Russell Stuart.) It solved all my connection problems. Best regards, Arik ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] Re: ipp2p Problem
Kajetan Staszkiewicz wrote: Dnia środa, 13 grudnia 2006 18:55, Arik Raffael Funke napisał(a): But the command given at the beginning does not work. It give in dmesg: ip_tables: ipp2p match: invalid size 0 != 8 I had same problems when I had too new kernel with too old ipp2p. Try 0.8.2. Thanks. That was indeed the solution. Regards, Arik ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] ipp2p Problem
Hello, can anybody interpret what the following means: [EMAIL PROTECTED] ipp2p-0.8.0]# iptables -t mangle -A MarkList0x666-ipp2p -p tcp -m ipp2p --edk -j MarkSet0x666 iptables: Unknown error 4294967295 - I have installed ipp2p-0.8.0 via: make copied ipt_ipp2p.ko to my kernel lib dir copied libipt_ipp2p.so to my iptables lib dir insmod ipt_ipp2p gives the following in dmesg: IPP2P v0.8.0 loading iptables -m ipp2p --help shows as expected the help for ipp2p But the command given at the beginning does not work. It give in dmesg: ip_tables: ipp2p match: invalid size 0 != 8 Thanks for the help! Regards, Arik ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] Re: Matching with Layer7 vs. IPP2P
L7 compiled fine on Fedora Core 4 with kernel 2.6.12.6 with following procedure: 1. patched kernel sources with ipp2p using patch-o-matic-ng 2. patched kernel with the patch file from l7 3. patched iptables-1.3.5 with l7 4. make/install iptables 5. make/install kernel I had to adjust the destination directories for iptables to fit Fedora's convention. Best regards, Arik Jandre Olivier wrote: I was just about to post the same post, I currently use ipp2p and it works pretty well, It just doesnt seem to track morpheous(fasttrack) protocols, otherwise it works pretty well. I have quite alot of connections and havent seen any performance issues. My next step is to add L7 as well with ipp2p to completely block/shape p2p. However I find L7 bit more tricky than ipp2p to compile Cannot comment on L7 J Arik Raffael Funke wrote: Hi, can anybody comment on the cost of matching with IPP2P vs. Layer7. Also, does a iptables rule with more complicated matching mechanism also slow down processing if all the packets are matched before they reach the rule. I.e. is the mere existence of a potentially costly rule already slowing down processing or only if packets are actually processed by it? Thanks very much in advance. Best regards, Arik ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[LARTC] Matching with Layer7 vs. IPP2P
Hi, can anybody comment on the cost of matching with IPP2P vs. Layer7. Also, does a iptables rule with more complicated matching mechanism also slow down processing if all the packets are matched before they reach the rule. I.e. is the mere existence of a potentially costly rule already slowing down processing or only if packets are actually processed by it? Thanks very much in advance. Best regards, Arik ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
