[LARTC] [ANNOUNCE] iproute2 (051007)

2005-10-07 Thread Stephen Hemminger
Fix one serious bug (in libnetlink), and a couple of other minor patches. http://developer.osdl.org/dev/iproute2/download/iproute2-051007.tar.gz Stephen Hemminger Reenable ip mroute Mike Frysinger Handle pfifo_fast that has no qopt without segfaulting Mads Martin Joergensen

Re: [LARTC] Error in "15.10 Example of full nat solution with QoS"?

2005-10-07 Thread Sean Dwyer
On Wednesday 05 October 2005 18:30, Sean Dwyer wrote: > Near the end of section 15.10, the following commands are shown for > prioritizing SYN packets: > > iptables -t mangle -I PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN > -j MARK --set-mark 0x1 > iptables -t mangle -I PREROUTING -

Re: [LARTC] How would this help my LAN / network

2005-10-07 Thread Andreas Klauer
On Friday 07 October 2005 18:28, Brent Clark wrote: > So my question is, for the following rules, would these increase my > browsing / traffic, and if so, how. I use something similar in my script... but it's useless to change TOS by itself, because this setting is pretty much ignored everywhere.

[LARTC] How would this help my LAN / network

2005-10-07 Thread Brent Clark
HI all I just came across one of the threads on the LARTC. In the thread it had this. So my question is, for the following rules, would these increase my browsing / traffic, and if so, how. iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK ACK -m length --length 0:128 -j

Re: [LARTC] Problems with ipp2p

2005-10-07 Thread /dev/rob0
On Friday 2005-October-07 08:29, Carlos Rosero wrote: > Thanks for the advice, how do in know if kernel module is loaded?, lsmod(8) > and how I do I load the module?. modprobe(8) I *strongly* urge you to take some time to acquaint yourself with the OS. You're trying to secure your network agai

RE: [LARTC] Problems with ipp2p

2005-10-07 Thread Carlos Rosero
Thanks for the advice, how do in know if kernel module is loaded?, and how I do I load the module?. Thanks. On Thursday 06 October 2005 23:40, Carlos Rosero wrote: > iptables: No chain/target/match by that name > but if I use iptables -m ipp2p -help I get the help page: > So I don't know what i

Re: [LARTC] Problems with ipp2p

2005-10-07 Thread Guillermo Javier Nardoni
Hello there, may be you should you:iptables -t nat -A PREROUTING -p tcp -i $DEV_IN -m ipp2p --ipp2p -j DROPiptables -t nat -A POSTROUTING -p tcp -o $DEV_OUT -m ipp2p --ipp2p -j DROPi had some issues trying ipp2p, but when i've just put -t nat or -t mangleor even -t filter (default for iptabl