Re: AW: AW: AW: AW: [LARTC] Activate ingress policies on suse enterpr ise serv er 9

2005-04-22 Thread Andy Furniss
Grames Gernot wrote: Hi, So far, if have understand correctly: I route the incoming tcpip message of port 8099 directly to 8080 and then the ingress filter on port 8099 has nothing to do!? Yes I think on different interface on one machine (different Ports for different Request, with different restr

[LARTC] Wondershaper 1.1a bandwidth speed test gives me uplink speed instead of downlink

2005-04-22 Thread Wes Hegge
I have been testing wondershaper 1.1a with htb. DOWNLINK=2304 UPLINK=1024 DEV=wlan0 No other changes have been made, except to comment out the 2 lines to allow the script to run. When I do a speed test from sites like www.toast.net/performance, I only get speeds equal to my UPLINK speed. I expe

Re: [LARTC] Suspicious Attachment

2005-04-22 Thread Arjen Meek
On Tue, Apr 19, 2005 at 10:15:19AM +0200, Michael Renzmann wrote: > I agree, but I also see no reason to have this discussion arising over > and over again. Local filtering should do the trick until that moron > understands that it is a bad idea to automatic ansers to the spoofed > sender of a v

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

2005-04-22 Thread Andy Furniss
Daniel Dafoe wrote: I really don't get it : Recompiled my kernel dozen times now is 2.6.11-gentoo-r5 but still packets are marked by iptables but not shaped by tc. It only works when I mark packets on source/destination ip As soon as I comment last two lines and uncomment the first one shaping is g

Re: [LARTC] HTB stalling

2005-04-22 Thread Krystian Antoni
How to check version of HTB?? I have standart one which came with kernel 2.6.11.7, my tc says I have "TC HTB version 3.3". Is this my HTB version? :-) Im not using FC3 kernel but a vanilla one so there is no much beta in it :) besides I cut most of the stuff out just for experimentation and still

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working -altough marking on ip src, dst address works

2005-04-22 Thread Andy Furniss
Daniel Dafoe wrote: Reading along the Net it seems that MAC marking is not working with egress HTB (because ipables marks packages based on --mac-source ). So my only choice is using ingress or u32. So this is how I did it: I called bellow script add_shaping DEV="eth0" tc qdisc add dev $DEV root ha

Re: [LARTC] Suspicious Attachment

2005-04-22 Thread Taylor Grant
If 554 is not the right reply for such a message, what would be a better way to indicate that the message is concidered utacceptable by my server? If it is the best reply, what should I do to avoid being kicked off the list because my mail server doesn't say "that's fine with me" when it gets sent

Re: [LARTC] HTB stalling

2005-04-22 Thread gypsy
Krystian Antoni wrote: > > How to check version of HTB?? > I have standart one which came with kernel 2.6.11.7, my tc says I have > "TC HTB version 3.3". Is this my HTB version? :-) No, it isn't. 3.3 is the TC version. The only ways I know to find out the HTB version are: 1) if it loads as a mo

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working -altough marking on ip src, dst address works

2005-04-22 Thread Daniel Dafoe
Reading along the Net it seems that MAC marking is not working with egress HTB (because ipables marks packages based on --mac-source ). So my only choice is using ingress or u32. So this is how I did it: I called bellow script add_shaping DEV="eth0" tc qdisc add dev $DEV root handle 1: htb defau

Re: [LARTC] HTB stalling

2005-04-22 Thread Krystian Antoni
The problem started with arrival of 2.6 kernels.On 4/22/05, Kunszt Arpad <[EMAIL PROTECTED] > wrote:> Hi all  Hi!>> iam also facing the same problem what Mr Antoni have > even i have done many kind of experment, but i could not resolve is> this bug in FC3,> but when i does the FC1 its working fine>

Re: [LARTC] Strange pings.

2005-04-22 Thread tc
On Friday 22 of April 2005 01:34, you wrote: > Which is about 2 packets @ 256kbit. I tested and got the same behaviour > with a simple setup, but max ping about 45 because htb dequeues in pairs > by default. If you change #define hysteresis from 1 to 0 in > net/sched/sch_htb.c then it's more acc

[LARTC] [OT] flow-control or not?

2005-04-22 Thread fRANz
Hi! Sorry if my question results offtopic in this list: where I can find more details about flow-control technology? My ProCurve 2848 support it, and I'm interested if I can use flow-ctl for increase my network performance. Thank you for any help. fRANz

[LARTC] Re: A question.

2005-04-22 Thread Taylor, Grant
that I apply it IP to each of my network? Yes, you will want a similar rule for each IP on your network. tc class add dev imq0 parent 1: classid 1:1 htb rate 15kbps tc qdisc add dev imq0 parent 1:1 handle 10: sfq perturb 10 tc filter add dev imq0 protocol ip parent 10:0 prio 1 u32 match ip src 192.

Re: [LARTC] Re: A question.

2005-04-22 Thread Taylor, Grant
15 Kbps half duplex tc qdisc add dev imq0 root handle 1: htb default 2 tc class add dev imq0 parent 1: classid 1:1 htb rate 15kbps tc qdisc add dev imq0 parent 1:1 handle 10: sfq perturb 10 tc filter add dev imq0 protocol ip parent 10:0 prio 1 u32 match ip src 192.168.1.1/32 flowid 1:1 tc filter a

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working -altough marking on ip src, dst address works

2005-04-22 Thread gypsy
Daniel Dafoe wrote: > > I really don't get it : > > Recompiled my kernel dozen times now is > 2.6.11-gentoo-r5 but still packets are marked by > iptables but not shaped by tc. It only works when I > mark packets on source/destination ip > > As soon as I comment last two lines and uncomment the >

Re: [LARTC] HTB stalling

2005-04-22 Thread gypsy
> hareram wrote: > > Hi all > > iam also facing the same problem what Mr Antoni have > even i have done many kind of experment, but i could not resolve is > this bug in FC3, > but when i does the FC1 its working fine > > I found difference from FC1 to FC3 is > > FC1 iptables 1.2.8 HTB 3.12 > FC

Re: [LARTC] HTB stalling

2005-04-22 Thread Kunszt Arpad
> Hi all Hi! > > iam also facing the same problem what Mr Antoni have > even i have done many kind of experment, but i could not resolve is > this bug in FC3, > but when i does the FC1 its working fine > > I found difference from FC1 to FC3 is > > FC1 iptables 1.2.8 HTB 3.12 > FC3 iptable

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

2005-04-22 Thread Daniel Dafoe
I really don't get it : Recompiled my kernel dozen times now is 2.6.11-gentoo-r5 but still packets are marked by iptables but not shaped by tc. It only works when I mark packets on source/destination ip As soon as I comment last two lines and uncomment the first one shaping is gone iptable

Re: [LARTC] Re: A question.

2005-04-22 Thread Taylor Grant
Ok, I have another question for you: 10) Is the 15 kbps rate limit a combination of inbound and outbound traffic or 15 kbps for inbound and 15 kbps for outbound for a total of 30 kbps traffic for any given client. (Is the 15 kbps full duplex or half duplex?) Grant. . . . __

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

2005-04-22 Thread Daniel Dafoe
Thanks again for your response tc -s qdisc ls dev eth0 qdisc htb 1: r2q 10 default 20 direct_packets_stat 0 Sent 12664555 bytes 9717 pkts (dropped 0, overlimits 374) qdisc sfq 150: parent 1:15 limit 128p quantum 1514b perturb 10sec Sent 0 bytes 0 pkts (dropped 0, overlimits 0) qdisc sfq 200: par