Re: [LARTC] beginner question about imq

2003-09-12 Thread Stef Coene
On Friday 12 September 2003 21:07, Szálka Tamás wrote: > At 18:58 2003. 09. 12.­ +0200, you wrote: > > > With the IMQ NAT patch the order is reversed? The filtering on > > > de-masqueraded addresses is only possible, if NAT is b e f o r e IMQ, > > > isn't it? Tom > > > >The nat in prerouting is als

Re: [LARTC] beginner question about imq

2003-09-12 Thread Szálka Tamás
At 18:58 2003. 09. 12.­ +0200, you wrote: > > With the IMQ NAT patch the order is reversed? The filtering on > de-masqueraded addresses is only possible, if NAT is b e f o r e IMQ, isn't > it? Tom The nat in prerouting is also reponsible for rewriting the addresses of natted packets. So you want

Re: [LARTC] tc -s -d explanation

2003-09-12 Thread Stef Coene
On Thursday 11 September 2003 21:09, Damjan wrote: > > I have some more info on the faq page on docum.org. > > But the -5999 is very strange. Can you post all your tc commands? > > And also check out your kernel log files for errors. > > > :) I guess it because of the big burst buffer: > > t

Re: [LARTC] beginner question about imq

2003-09-12 Thread Stef Coene
On Friday 12 September 2003 17:22, Szálka Tamás wrote: > At 19:15 2003. 09. 11.istory. +0200, you wrote: > > > The picture you have in http://www.docum.org/stef.coene/qos/kptd is > > > with (or without) the IMQ NAT patch? > > > >Without. In prerouting, you see that IMQ is before nat. > > > >Stef >

Re: [LARTC] tc C/C++ API

2003-09-12 Thread Σταμάτης Κεκές
I know tcng package but I prefer a library like libipt witch deals with the netfilter part of the kernel. Diogo Nuno P. Gomes wrote: Hi! There is the tcng package as mencioned in another reply and there is also: http://oss.software.ibm.com/developerworks/downloads/index.php?group_id=93 (IBM TC A

Re: [LARTC] beginner question about imq

2003-09-12 Thread Szálka Tamás
At 19:15 2003. 09. 11.istory. +0200, you wrote: > > The picture you have in http://www.docum.org/stef.coene/qos/kptd is with > (or without) the IMQ NAT patch? Without. In prerouting, you see that IMQ is before nat. Stef With the IMQ NAT patch the order is reversed? The filtering on de-masquerade

Re: [LARTC] TCNG building problems...help

2003-09-12 Thread raptor
]- try to build w/o tcsim, (if u need it u will have to find a solution then :")) i.e. ./configure --no-tcsim make make test |Hi, | |I downloaded the latest tcng release, however am having problems to |build it.below are the kind of error messages am getting. Do u people |have a clue as t

[LARTC] floods

2003-09-12 Thread raptor
after the recent outbreak of Welchia and winblaster, i was wondering of a way to block Flooding of pings or such activity... My question is what u do to block such floods automaticaly per IP...what I mean. Example I'm aware that I don't want to allow any concentrate IP host/address to send to me

Re: [LARTC] tc C/C++ API

2003-09-12 Thread Eric Leblond
Have a look at tc source code every system calls should be in there ;-) -- Eric Leblond Nufw, Now User Filtering Works (http://www.nufw.org) signature.asc Description: Ceci est une partie de message =?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=

Re: [LARTC] tc C/C++ API

2003-09-12 Thread Σταμάτης Κεκές
I know very well the tcng but it takes as input a configuration and produces a shell script. I need a library or the system calls to communicate directly with the kernel QoS without invlolving any shell command. Thanks for the interest. Steve Wright wrote: On Fri, 2003-09-12 at 18:34, Σταμάτης Κ

Re: [LARTC] sending paket from non primary ip

2003-09-12 Thread Ryan Goldberg
Sending packets from secondary IP: ip route add via src check with: ip route get Ryan ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] sending paket from non primary ip

2003-09-12 Thread Robert Penz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 oops sorry .. that doesn't work false alarm so I still need a solution ;-) - -- Regards, Robert - -- Robert Penz robert dot penz at outertech dot com -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux) iD8D

Re: [LARTC] sending paket from non primary ip

2003-09-12 Thread Robert Penz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 12 September 2003 13:24, Robert Penz wrote: got it working that way iptables -t nat -A POSTROUTING -d $switch_ip -j SNAT --to-source $meine_die_non_prim but does there not exit a warper in user space? - -- Regards, Robert - --

[LARTC] sending paket from non primary ip

2003-09-12 Thread Robert Penz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! I want to use snmpget to get an status from a switch but I can't change my primary ip of the machine to the need ip bye the switch .. so I added it as eth:0 how can I make the connection outgoing from that ip and not my primary? - -- Regards

[LARTC] TCNG building problems...help

2003-09-12 Thread aj
Hi, I downloaded the latest tcng release, however am having problems to build it…below are the kind of error messages am getting. Do u people have a clue as to why this is happening ?   Thanks in advance   =- - - - - make[3]: Entering di

[LARTC] Default Port

2003-09-12 Thread Raghuveer
Hi All, For default IP traffic we are placing 0/0, similarly whether anyone has idea about default port?. This is the scenario when rules are framed based on ports. -Raghu ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/

Re: [LARTC] tc C/C++ API

2003-09-12 Thread Steve Wright
On Fri, 2003-09-12 at 18:34, Σταμάτης Κεκές wrote: > I plan to write a KDE frontend for the traffic control and for iproute2. > Is there anyt c/c++ API that I can use instead of executing shell > commands ? You might use tcng http://tcng.sf.net best, Steve ___

[LARTC] [tcng] is there a way to not build the DOCS ?

2003-09-12 Thread raptor
is there way to not build DOCS ? when doing 'make', 'make install' or better specify in ./configure step.. I'm not in .rpm distro how to exclude this from the installation process too... !? tia make[1]: Leaving directory `/var/tmp/portage/tcng-9f/work/tcng/doc' make[1]: Entering directory `/var

[LARTC] [test] ignore

2003-09-12 Thread raptor
test.. ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/