RE: [LARTC] exporting service on multiple wan

2007-10-18 Thread Salim S I
Sorry, I forgot for a moment it was DMZ. In mangle PREROUTING -j CONNMARK restore-mark -m mark --mark 0x0 -i WAN1 -j CONNMARK --set-mark 0x1 -m mark --mark 0x0 -i WAN2 -j CONNMARK --set-mark 0x2 Two routing tables, one for each mark. -Original Message- From: [EMAIL PROTECTED] [mailto:[E

Re: [LARTC] exporting service on multiple wan

2007-10-18 Thread Mohan Sundaram
Salim S I wrote: How about conn-marking the (NEW state)packets in POSTROUTING? Would probably need to use conntrack ESTABLISHED,DNAT and ROUTE directive for packets coming from LAN to make sure packet goes out from the same interface it came on. Mohan

RE: [LARTC] exporting service on multiple wan

2007-10-18 Thread Salim S I
How about conn-marking the (NEW state)packets in POSTROUTING? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mohan Sundaram Sent: Friday, October 19, 2007 10:19 AM To: LARTC Subject: Re: [LARTC] exporting service on multiple wan Fabio Marcone wrote: > Hi

Re: [LARTC] exporting service on multiple wan

2007-10-18 Thread Mohan Sundaram
Fabio Marcone wrote: Hi all, I've a routing problem. I'm setting up a router based on debian (kernel 2.4). I need to setup routing to export an ftp service (ftp server is in dmz) to 2 wan (both). I setup prerouting ad forward rule with no problem. The problem is that reply packet use default g

Re: [LARTC] TC basic match problems

2007-10-18 Thread Peter Rabbitson
Michal Soltys wrote: Peter Rabbitson wrote: Hello, I am attempting to match on a single bit of the NF mark value, and after hours of reading and googling I can not get the syntax right. It got to be something very simple, yet I can't find it. Any help will be greatly appreciated. Hmm wo

Re: [LARTC] TC basic match problems

2007-10-18 Thread Michal Soltys
Peter Rabbitson wrote: Hello, I am attempting to match on a single bit of the NF mark value, and after hours of reading and googling I can not get the syntax right. It got to be something very simple, yet I can't find it. Any help will be greatly appreciated. Hmm wouldn't something like:

[LARTC] rx_csum_offload_errors

2007-10-18 Thread aragonx
This might not be the right place to ask this question. If someone could point me to a better place, that would be greatly appreciated. My question is this, what is this rx_csum_offload_errors and what causes them. I see them on a few machines that are on my network. I only get maybe 10 or so a

[LARTC] exporting service on multiple wan

2007-10-18 Thread Fabio Marcone
Hi all, I've a routing problem. I'm setting up a router based on debian (kernel 2.4). I need to setup routing to export an ftp service (ftp server is in dmz) to 2 wan (both). I setup prerouting ad forward rule with no problem. The problem is that reply packet use default gateway (default wan) ev

[LARTC] Quality of Service with VLAN using Traffic Control (tc)

2007-10-18 Thread Johnray Fuller
We are using VLAN tagging to put several networks on one machine. To ensure quality of service on one of the VLANs, we would like to prioritize (outgoing/egress traffic) one VLAN interface over the other (or others), but without capping bandwidth on any of the interfaces. We want to do this while