Re: [LARTC] SNAT on IPSEC tunnel with kernel 2.6/KAME tools?

2006-05-05 Thread Patrick McHardy
G Georgiev wrote: Hi, Could not conceive an working set-up for an IPSEC VPN made with racoon/setkey on which I have one address on my side acting as an SNAT router for all traffic from my network to a network segment on the far side. my network --- my gateway

[LARTC] Matching interface using U32(?)

2006-05-05 Thread Nataniel Klug
Hello all, I am trying to make a little bit more complex QoS/Shapping form and I need to shape a PPPoE conection that I serve to my clients. So this is the scope: client connects using pppoe so it gets an IP address (from pppoe pool) and open an interface into my linux box interface

[LARTC] where i can find this netem patch?

2006-05-05 Thread George Nychis
Hi, I need help finding this patch that Stephen made. He sent me a patch, but i do not think its related to the patch that solved this problem. I will include the patch he did forward to me at the bottom. However here is the problem, i even rtied his misspelling of change :) thorium-ini

Re: [LARTC] SNAT on IPSEC tunnel with kernel 2.6/KAME tools?

2006-05-05 Thread G Georgiev
Thanks, Will try out that - will upgrade the kernel and see how it works. George. On Friday 05 May 2006 09:39 am, Patrick McHardy wrote: G Georgiev wrote: Hi, Could not conceive an working set-up for an IPSEC VPN made with racoon/setkey on which I have

[LARTC] Re: [Netem] where i can find this netem patch?

2006-05-05 Thread Stephen Hemminger
On Fri, 05 May 2006 11:08:23 -0400 George Nychis [EMAIL PROTECTED] wrote: Hi, I need help finding this patch that Stephen made. He sent me a patch, but i do not think its related to the patch that solved this problem. I will include the patch he did forward to me at the bottom.

[LARTC] iptables time match mangle stage

2006-05-05 Thread William Bohannan
Hi I am having problems trying to get a time match with iptables 1.3.5 and the latest pom it says time match only works in the prerouting stage but I really need to use the classify command which only works in the postrouting. Does any one have a patch for 2.6 kernel, latest pom and iptables

[LARTC] iptables CLASSIFY vs fwmark?

2006-05-05 Thread Edwin Whitelaw
Could someone comment on the benefits of using CLASSIFY vs fwmark (or vice versa) in iptables? I'm getting ready to implement some basic tc for VoIP and most of the examples seem to use the (older?) fwmark syntax. Should I convert these to CLASSIFY? Can the two syntaxes be mixed? Also with