[LARTC] Tuning HTB

2002-04-14 Thread Christian Volk
Hi! I'm trying to share a 64 kbits/s ISDN connection for FTP downloads and WWW. FTP should slow down WWW a little a possible. I tried HTB (with kernel 2.4.18) with the following (amongst other) settings: $TC qdisc add dev $IF root handle 1: htb default 20 $TC class add dev $IF parent 1:

RE: [LARTC] Firewall Question?

2002-04-14 Thread Greg Scott
A rule like: /sbin/iptables -A FORWARD -i eth0 -s 192.168.0.0/24 -j DROP would do the trick. Kind of a sledgehammer solution, but it should block everyone. - Greg -Original Message- From: Ross Skaliotis [mailto:[EMAIL PROTECTED]] Sent: Sunday, April 14, 2002 11:15 AM To: Brian Cc: [E

Re: [LARTC] PRIO not working?

2002-04-14 Thread Jacob Elder
On Sun, Apr 14, 2002 at 12:26:05PM +0200, bert hubert wrote: > On Sat, Apr 13, 2002 at 05:24:10PM -0400, Jacob Elder wrote: > > I'm trying to prioritize interactive traffic over other traffic on my 56k > > dialup link. I wrote some chains to set the ToS in PREROUTING and OUTGOING, > > and I'm usin

Re: [LARTC] Firewall Question?

2002-04-14 Thread Ross Skaliotis
When you use NAT to route traffic from eth0 out to the internet, it flows through the FORWARD table, bypassing the INPUT and OUTPUT tables completely. You'll need to setup a rule in your firewall blocking access using the FORWARD table. -Ross Skaliotis On Sun, 14 Apr 2002, Brian wrote: > > I ha

[LARTC] Firewall Question?

2002-04-14 Thread Brian
I have a iptables firewall version 1.2.5, I LOVE IPTABLES SO MUCH MORE THINGS YOU CAN DO. I have a small network off my eth0 interface 192.168.0.X network and my ppp0 is my DSL connection, with the current firewall how would I block someone going to the Internet from my eth0 interface. I have tri

Re: [LARTC] HTB-link sharing (borrowing) doesn't work

2002-04-14 Thread Martin Devera
Hi it seems as if there is something other throttling the data - is not it the case that you tested the downloads thru your 128k internet connection ? If yes then throttling is done at other side of line. The try to set BAND to 110k for example ... devik On Sun, 14 Apr 2002, Lumir Unzeitig wrote:

[LARTC] HTB-link sharing (borrowing) doesn't work

2002-04-14 Thread Lumir Unzeitig
Hello, I want to set up typical scenario: entire bandwith (128kbps from ISP) to devide to 2 parts: 1\traffic from special source IP address 2\ rest Each part should be capable of "borrowing" from the other in case of less traffic on either side. I set up according to the HTB manual using

Re: [LARTC] PRIO not working?

2002-04-14 Thread bert hubert
On Sat, Apr 13, 2002 at 05:24:10PM -0400, Jacob Elder wrote: > I'm trying to prioritize interactive traffic over other traffic on my 56k > dialup link. I wrote some chains to set the ToS in PREROUTING and OUTGOING, > and I'm using a PRIO queue with three SFQ children: PRIO works just fine - you p

Re: [LARTC] long delays with NNTP after switching T1 to other ser vcie provider

2002-04-14 Thread bert hubert
On Sun, Apr 14, 2002 at 12:37:14AM -0700, David Koski wrote: > To clarify, doing a reverse DNS on me outside of the local network does not > work. Are we on the same page? I think that is causing a problem receiving > some mail also. Might very well be. I sould advise contacting the administrat

Re: [LARTC] Ingress policing

2002-04-14 Thread bert hubert
On Fri, Apr 12, 2002 at 05:09:14PM +0200, Jan Coppens wrote: > Hi all, > > Currently, I'm experimenting with ingress policing. Is it possible to > attach multiple u32 filters to the same policer or attach one policer to > multiple u32 filters? I would like to define a shared meter, so the rate >

Re: [LARTC] long delays with NNTP after switching T1 to other ser vcie provider

2002-04-14 Thread David Koski
To clarify, doing a reverse DNS on me outside of the local network does not work. Are we on the same page? I think that is causing a problem receiving some mail also. Thanks, David On Sun, 14 Apr 2002 01:29:44 -0500 Greg Scott <[EMAIL PROTECTED]> wrote: > I'll bet that's the right direction.