Re: [LARTC] iproute2 tool compiling problems.

2004-09-24 Thread Sergio Hormaetxe Gallego
hi, when i put the iproute2 i only did the next: apt-get install iproute because in debian the name of the package is without the 2, and i didn´t have any problem to install it (other things...). only a question: are u trying to run cbq.init? Sergio - Mensaje Original - De: Natha

Re: [LARTC] interesting expert problem - shaping over VPN

2004-09-24 Thread [EMAIL PROTECTED]
hi trevor, On Fri, 2004-09-24 at 05:44, Trevor Cordes wrote: > On 18 Sep, [EMAIL PROTECTED] wrote: > > hi, > > > > there was a thread on this recently -- please search the archives for > > > > "traffic queueing and ipsec vpn" > > Ya, I had seen that. I just reread the thread and it doesn't rea

RE: [LARTC] Prioritizing forwarded traffic over locally generated traffic

2004-09-24 Thread Neil Greatorex
Many thanks to both of you for your replies. I have managed to get the setup working how I intended now - by using HTB classes/qdiscs. I had tried this approach before as one of many, however what I had failed to do was create the two classes I am filtering the traffic into as subclasses of a pare

Re: [LARTC] iproute2 tool compiling problems.

2004-09-24 Thread Stephen Hemminger
On Fri, 2004-09-24 at 09:11 +0200, Sergio Hormaetxe Gallego wrote: > hi, > > when i put the iproute2 i only did the next: > > apt-get install iproute > > because in debian the name of the package is without the 2, and i > didn´t have any problem to install it (other things...). > > only a ques

Re: [LARTC] Prioritizing forwarded traffic over locally generated traffic

2004-09-24 Thread Jason Boxman
On Friday 24 September 2004 12:55, Neil Greatorex wrote: > Many thanks to both of you for your replies. > > I have managed to get the setup working how I intended now - by using HTB > classes/qdiscs. I had tried this approach before as one of many, however > what I had failed to do was create the t

[LARTC] CONNMARK problem

2004-09-24 Thread cvok
Hello everybody. i have the folowing problem: i have this in the top of PREROUTING chain in mangle table iptables -t mangle -A PREROUTING -j CONNMARK --set-mark 0# rule 1 iptables -t mangle -A PREROUTING -m connmark --mark 5# rule 2 iptables -t mangle -A PREROUTING -m connmar

Re: [LARTC] CONNMARK problem

2004-09-24 Thread Tomasz Chilinski
On Fri, 24 Sep 2004 20:21:22 +0200, cvok wrote > Hello everybody. Hello. > i think when packet is passing trough my POSTROUTING in mangle table > it can't match rule 2 or 3, but in the real life it is a little bit different > > iptables -t mangle -L PREROUTING -v > shows following: > Chain PRERO

[LARTC] HTB's scalability

2004-09-24 Thread David, Rasikan
Title: HTB's scalability I am new to this list, so, bear with me if this question has been answered already. We are looking at a high end Linux router (Dual Xeon) as our platform to perform high speed packet processing and Have some concerns oh how well HTB will scale with an offered load

Re: [LARTC] CONNMARK problem

2004-09-24 Thread zytek
Dnia piątek 24 wrzesień 2004 19:28, Tomasz Chilinski napisał: > On Fri, 24 Sep 2004 20:21:22 +0200, cvok wrote > > > Hello everybody. > > Hello. > > > i think when packet is passing trough my POSTROUTING in mangle table > > it can't match rule 2 or 3, but in the real life it is a little bit > > dif

[LARTC] strange behavior of ipsec tunnel mode

2004-09-24 Thread Michal Purzynski
hello i am trying to set up ipsec in my network, for now just between two hosts, using to use AH & ESP in tunnel mode to get all of packet encrypted. keys are negotiated with racoon. mayby using tunnel mode in this case can seems strange, but i know what i am doing. after setting up everything i