Re: [LARTC] limit ftp bandwidth

2002-04-16 Thread Stef Coene
On Monday 15 April 2002 23:15, Omar Armas wrote: I want to limit ftp bandwith to 128Kb. In a RH 7.2 box I have: eth0: 200.39.186.1 eth1: 192.168.1.1 I use these rules: tc qdisc add dev eth0 root handle 10: cbq bandwidth 10Mbit avpkt 1000 tc class add dev eth0 parent 10:0 classid 10:1282

Re: [LARTC] limit ftp bandwidth

2002-04-16 Thread Patrick McHardy
Stef Coene wrote: On Monday 15 April 2002 23:15, Omar Armas wrote: I want to limit ftp bandwith to 128Kb. In a RH 7.2 box I have: eth0: 200.39.186.1 eth1: 192.168.1.1 I use these rules: tc qdisc add dev eth0 root handle 10: cbq bandwidth 10Mbit avpkt 1000 tc class add dev eth0 parent 10:0

Re: [LARTC] Per-connection routing for multiple uplinks/providers ??

2002-04-16 Thread Patrick McHardy
Bob Gustafson wrote: On Mon, 15 Apr 2002, Bob Gustafson wrote: What I would like to do is cleanly move packets out to the Internet over two (maybe 3) separate interfaces, utilizing all of the bandwidth, and avoiding snags. [snip, lots of nice interesting wishes] Does such a beast exist? Is

Re: [LARTC] Per-connection routing for multiple uplinks/providers??

2002-04-16 Thread Patrick McHardy
Mihai RUSU wrote: I wont recommend the round robin packet load balancing as that would do more problems with TCP connections, asymetric routing , RTT values. I guess if you'd use multiple connections to the same ISP (and same access point) that would solve the problems of different RTT

Re: [LARTC] Per-connection routing for multiple uplinks/providers??

2002-04-16 Thread Mihai RUSU
On Tue, 16 Apr 2002, Patrick McHardy wrote: Mihai RUSU wrote: I wont recommend the round robin packet load balancing as that would do more problems with TCP connections, asymetric routing , RTT values. I guess if you'd use multiple connections to the same ISP (and same access point)

[LARTC] filters order - are they ordered?

2002-04-16 Thread Dmytro Redchuk
Hi. I have set up several htb classes, attached filters to them, and all seems to work right, but... It seems, that fw classifiers have lower priority in comparing with u32 ones. So, in my current scenario it's optimal (as I think now) to use both u32 and fw, but I wonder can I

Re: [LARTC] filters order - are they ordered?

2002-04-16 Thread Mihai RUSU
On Tue, 16 Apr 2002, Dmytro Redchuk wrote: Hi. I have set up several htb classes, attached filters to them, and all seems to work right, but... It seems, that fw classifiers have lower priority in comparing with u32 ones. So, in my current scenario it's optimal (as I think

Re: [LARTC] filters order - are they ordered?

2002-04-16 Thread Stef Coene
I have set up several htb classes, attached filters to them, and all seems to work right, but... It seems, that fw classifiers have lower priority in comparing with u32 ones. mh. I never noticed that. So, in my current scenario it's optimal (as I think now) to use both u32

[LARTC] U32 dport filter problem

2002-04-16 Thread Federico Vecchiatti
Hi, while testing HTB, I've found a problem with the U32 dport flag. I'm not able to send traffic via the U32 dport filter with the rules from the HTB manual while the same rules generated by the htb.init script works fine. The only difference I can see is that with the rules from the htb

[LARTC] re: Per-connection routing for multiple uplinks/providers

2002-04-16 Thread Don Cohen
I have been digging through the Lartc documentation as well as Netfilter, etc. and haven't found much on per-connection routing for multiple uplinks/providers. What I would like to do is cleanly move packets out to the Internet over two (maybe 3) separate interfaces, utilizing all of

[LARTC] compile error !!

2002-04-16 Thread Arindam Haldar
hi all, while compiling iproute2-2.4.7-now-ss010824 with kernel-2.4.18 i got the following error ! ... i need ur help friends ! make[2]: Entering directory `/usr/src/linux-2.4.18/net/ipv4/netfilter' gcc -D__KERNEL__ -I/usr/src/linux-2.4.18/include -Wall -Wstrict-prototypes -Wno-trigraphs -O9

Re: [LARTC] Per-connection routing for multiple uplinks/providers

2002-04-16 Thread Bob Gustafson
I have been digging through the Lartc documentation as well as Netfilter, etc. and haven't found much on per-connection routing for multiple uplinks/providers. What I would like to do is cleanly move packets out to the Internet over two (maybe 3) separate interfaces, utilizing all of

Re: [LARTC] Per-connection routing for multiple uplinks/providers

2002-04-16 Thread Don Cohen
Bob Gustafson writes: But, But, - this is really just software. We are not trying to cram wine bottles down the internet pipe (although many would really like to do that!). The limitations I point out are inherent in tcp/ip. I think I sent a proposal to this list describing a

Re: [LARTC] Per-connection routing for multiple uplinks/providers

2002-04-16 Thread Bob Gustafson
Don Cohen writes: Bob Gustafson writes: But, But, - this is really just software. We are not trying to cram wine bottles down the internet pipe (although many would really like to do that!). The limitations I point out are inherent in tcp/ip. Yes, there are limitations in tcp/ip..

[LARTC] Blocking ICQ and MSN Messager

2002-04-16 Thread Brian
Does any one no how to block ICQ and MSN Instant messenger? I want to block them using iptables ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[LARTC] A tc htb/iptables rate control script for ADSL

2002-04-16 Thread alex
Hi, Firstly I appologise for the cross-posting but as I got help from all over the place I thought I had better feed back the results now I have this working. The Problem: I run a Speedtouch ADSL modem on my router and host a number of services behind my link (web server mainly) so people

RE: [LARTC] Blocking ICQ and MSN Messager

2002-04-16 Thread Brian
This one Blocks AOL IM and ICQ iptables -A FORWARD --dport 5190 -j REJECT iptables -A FORWARD -d login.oscar.aol.com -j REJECT -- This one Blocks MSN Messenger iptables -A FORWARD -p TCP --dport 1863 -j REJECT iptables -A FORWARD -d 64.4.13.0/24 -j REJECT