Re: [LARTC] Not routing for 1 host?

2006-04-04 Thread Martin Volf
Joost Kraaijeveld wrote: Hi, I want to stop routing for 1 particular host in my network. I thought that this would do it: iptables -D INPUT -d aaa.bbb.ccc.ddd -j DROP iptables -D INPUT -s aaa.bbb.ccc.ddd -j DROP But that still shows traffic. What is the corract way to do that? Hello,

RE: [LARTC] Not routing for 1 host?

2006-04-04 Thread Joost Kraaijeveld
[EMAIL PROTECTED] wrote: Hi, I want to stop routing for 1 particular host in my network. I thought that this would do it: iptables -D INPUT -d aaa.bbb.ccc.ddd -j DROP iptables -D INPUT -s aaa.bbb.ccc.ddd -j DROP Ooops, silly me. Should be (as others pointed out): iptables -A INPUT -d

RE: [LARTC] Not routing for 1 host?

2006-04-04 Thread Joost Kraaijeveld
[EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: Hi, I want to stop routing for 1 particular host in my network. I thought that this would do it: iptables -D INPUT -d aaa.bbb.ccc.ddd -j DROP iptables -D INPUT -s aaa.bbb.ccc.ddd -j DROP Ooops, silly me. Should be (as others pointed

[LARTC] Problems matching by mac address

2006-04-04 Thread Adam M. Towarnyckyj
Hey all, I recently read on a prior post as well as the FAQ that packets can be limited by mac address using the u32 filter. I attempted this and, while all the commands went through with no errors, it is not limiting at all. Im attempting to limit all IP traffic to a specific

Re: [LARTC] Possible kernel bug with routes

2006-04-04 Thread Ard van Breemen
On Mon, Mar 27, 2006 at 11:56:52AM +0200, Sven Anders wrote: snipped a lot ip route add 10.100.0.0/24 dev eth0 proto kernel scope link RTNETLINK answers: File exists s/add/append/ I thought they are different!?! Is here any difference I did not see? If they are not different, why does the

Re: [LARTC] Another question (now about u32)

2006-04-04 Thread Jody Shumaker
On 4/4/06, Nataniel Klug [EMAIL PROTECTED] wrote: Hello all, I am trying to match some conections using u32 but I tryed this: [EMAIL PROTECTED] ~]# tc filter add dev eth1 parent 1:0 protocol ip prio 1 u32 match ip src 0/0 match ip dst 0/0 match ip sport 80 0x flowid 1:10

Re: [LARTC] Another question (now about u32)

2006-04-04 Thread Nataniel Klug
Jody, Tryed, not working, same error: [EMAIL PROTECTED] ~]# tc filter add dev eth1 parent 1:0 protocol ip prio 1 u32 match ip sport 80 0x flowid 1:10 RTNETLINK answers: Invalid argument We have an error talking to the kernel Att, Nataniel Klug Jody Shumaker escreveu: On 4/4/06,

Re: [LARTC] Another question (now about u32)

2006-04-04 Thread Nataniel Klug
Guys, I tryed to make the u32 module up, but didnt work as well: [EMAIL PROTECTED] sched]# ls cls_fw.ko cls_rsvp.ko sch_cbq.ko sch_gred.ko sch_htb.ko sch_netem.ko sch_red.ko sch_tbf.ko cls_route.ko cls_u32.ko sch_dsmark.ko sch_hfsc.ko sch_ingress.ko sch_prio.ko

Re: [LARTC] Problems matching by mac address

2006-04-04 Thread Alexey Toptygin
On Tue, 4 Apr 2006, Adam M. Towarnyckyj wrote: I recently read on a prior post as well as the FAQ that packets can be limited by mac address using the u32 filter. I attempted this and, while all the commands went through with no errors, it is not limiting at all. I'm attempting to

RE: [LARTC] Proxy ARP and UDP

2006-04-04 Thread Greg Scott
I found the problem! It was me and it was dumb... This was the network layout: 10.10.10.0/24 1.2.3.0/27 10.10.10.n internal hosts | +-+++---+--to the Internet | || | Proxied ||

[LARTC] Request for guidance

2006-04-04 Thread Jim Lloyd
Hello all, I have leased 1/3rd of a rack (14U space) in a top notch data center. I'll be racking a layer 2 managed switch (a Dell PowerConnect 5224), four of my own servers (1U Opteron servers, single socket, dual core, dual NIC), as well 2 servers for 2 friends who will be subleasing