RE: [LARTC] List fault?

2011-05-04 Thread Alex Samad
+1 -Original Message- From: lartc-boun...@mailman.ds9a.nl [mailto:lartc-boun...@mailman.ds9a.nl] On Behalf Of Russell Stuart Sent: Thursday, 5 May 2011 9:41 AM To: lartc@mailman.ds9a.nl Subject: Re: [LARTC] List fault? On Wed, 2011-05-04 at 14:24 -0500, Grant Taylor wrote: > All in favo

Re: [LARTC] PAT HOW to - IPTABLES

2007-12-11 Thread Alex Samad
On Tue, Dec 11, 2007 at 12:19:22AM +0100, Radek 'Goblin' Pieczonka wrote: > >>> Suppose, I have 3 mail servers @ DMZ zone with one real ip. the situation >>> as before? >>> >>> in that case, What can I do? >>> >> your could use exim/postfix and route the mail to the right server, but I >> gu

Re: [LARTC] PAT HOW to - IPTABLES

2007-12-10 Thread Alex Samad
On Mon, Dec 10, 2007 at 04:09:52PM +0530, Indunil Jayasooriya wrote: > > > > > > > > see cache_peer !! > > > > squid can load balance between 3 servers and cache it !! > > > > run squid on your box with real ip.. > > > > Thanks for your quick answer. I know about reverse proxy. I wanted to know > >

[LARTC] Bandwith vsatl - not static

2007-12-06 Thread Alex Segura N.
in period of time as from 8:00am - 12:00pm bandwith 200kbps and from 12:00pm-16:00pm 100 kbps. And so on. Depend of the stadistic I assume. And reload the script several time with crob. Does anyone knows a better way? Regards. -- Alex Segura N. Jefe de Proyectos Redes - VoIP

Re: [LARTC] One machine, two net feeds, outbound route selection

2007-10-25 Thread Alex Samad
On Thu, Oct 25, 2007 at 02:00:14PM -0400, Ben Scott wrote: > On 10/25/07, Peter Rabbitson <[EMAIL PROTECTED]> wrote: > > Unfortunately not easy without doing local NAT (from the local interface > > to another local interface). Can you use marking, mark the packet in the mangle table, us iptables t

Re: [LARTC] Routing public IP's through a gateway

2007-10-14 Thread Alex Samad
On Sun, Oct 14, 2007 at 11:07:10PM +1000, Tim Groeneveld wrote: > Greeting all, > > I have a bit of a complicated question. > > I have two ethernet devices, eth1 and eth2. > > eth1 is where my internet comes from. It is in the form of > 202.172.122.208/29. > It has another IP range, 202.172.12

[LARTC] scrapting data from tc rules

2007-10-12 Thread Alex Samad
Hi Currently I use snmp to scrap information from my router about its interfaces, does any one have an easy way of scaping information from tc rules to place into a rrd db ? do I need to put together a perl script to extract it from the output ? Alex signature.asc Description: Digital

Re: [LARTC] Multipath Multirouter - Can it be done?

2007-10-10 Thread Alex Samad
sound like you need a routing protocol, if you have access to manage all the routers On Wed, Oct 10, 2007 at 09:44:09PM -0600, Tony Hagans wrote: > Currently I have a setup that involves connections from several different > providers ranging from 6 mbit DSL's to 10 mbit fractional DS3 connectio

Re: [LARTC] OpenVPN routing

2007-09-10 Thread Alex Samad
On Mon, Sep 10, 2007 at 03:48:13PM -0700, Daniel L. Miller wrote: > Alex Samad wrote: >> On Mon, Sep 10, 2007 at 01:40:29PM -0700, Daniel L. Miller wrote: >> >>> Alex Samad wrote: >>> >>>> On Sun, Sep 09, 2007 at 11:36:18PM -0700, D

Re: [LARTC] OpenVPN routing

2007-09-10 Thread Alex Samad
On Mon, Sep 10, 2007 at 01:40:29PM -0700, Daniel L. Miller wrote: > Alex Samad wrote: >> On Sun, Sep 09, 2007 at 11:36:18PM -0700, Daniel L. Miller wrote: >> >>> Hi! >>> >>> I'm trying to create a routed VPN using OpenVPN - and having trouble with

Re: [LARTC] OpenVPN routing

2007-09-10 Thread Alex Samad
On Sun, Sep 09, 2007 at 11:36:18PM -0700, Daniel L. Miller wrote: > Hi! > > I'm trying to create a routed VPN using OpenVPN - and having trouble with > the routing concepts involved. Let me see if I can properly describe my > current topology: > > Server - > LAN, with both local workstations and

Re: [LARTC] 2 ISP connection sharing problem

2007-09-02 Thread Alex Samad
On Sun, Sep 02, 2007 at 03:25:11PM +0500, Arman wrote: > Thats fine but primary problem is that only one connection is used at a time > but I want to utilize both at the same time. Please guide > > > -- Forwarded message -- > From: "Jorge Evangelista" <[EMAIL PROTECTED]> > To: lar

Re: [LARTC] Redundant internet connections.

2007-06-21 Thread Alex Samad
On Thu, Jun 21, 2007 at 05:23:23PM -0500, Grant Taylor wrote: > On 06/21/07 17:18, Alex Samad wrote: > >sorry yep, just woken up, reading and answering whilst eating breakfast > > *nod* > > >okay then why not > > > >default via preffered path > >default

Re: [LARTC] Redundant internet connections.

2007-06-21 Thread Alex Samad
On Thu, Jun 21, 2007 at 04:24:19PM -0500, Grant Taylor wrote: > On 06/21/07 16:01, Alex Samad wrote: > >should something like this work > > > >default proto static metric 5 > > nexthop via 58.173.108.1 dev vlan2 weight 10 > > nexthop via 10.20.20.106 d

Re: [LARTC] Redundant internet connections.

2007-06-21 Thread Alex Samad
On Thu, Jun 21, 2007 at 05:35:13PM +0200, Peter Rabbitson wrote: > Grant Taylor wrote: > > >I need a way for the Linux kernel to try to use a default gateway and > >switch to another one if it does not see any traffic. should something like this work default proto static metric 5 nexthop via

Re: [LARTC] Linux bridging and cascaded switches

2007-06-19 Thread Alex Samad
On Tue, Jun 19, 2007 at 06:35:46PM -0500, Greg Scott wrote: > > out of curiosity why would you want to bridge at the firewall. is > this meant to be a drop in-line firewall appliance > > Long story but yes, it is essentially a drop in-line system. It's a > mess. > > So will that Internet rout

Re: [LARTC] Linux bridging and cascaded switches

2007-06-19 Thread Alex Samad
On Tue, Jun 19, 2007 at 05:54:46PM -0500, Greg Scott wrote: > Hi - > > Still plugging away at my Linux bridge/firewall and thinking through the > consequences. In a normal firewall situation, the Internet is on one > side, the internal LAN on the other. Duh! But now, with a Linux bridge > in th

Re: [LARTC] Re: multiple routing tables for internal router programs

2007-06-13 Thread Alex Samad
On Thu, Jun 14, 2007 at 11:50:30AM +0800, Salim S I wrote: > I solved it, thought a bit ugly. > > Have two more rules now in ip ru > > 32150: from all lookup main > 32201: from all fwmark 0x200/0x200 lookup wan1_route > 32202: from all fwmark 0x400/0x400 lookup wan2_route > 32203: from 10.20.

Re: [LARTC] Multihome load balancing - kernel vs netfilter

2007-06-05 Thread Alex Samad
On Tue, Jun 05, 2007 at 02:48:01PM +0800, Salim S I wrote: > > > -Original Message- > From: Luciano Ruete [mailto:[EMAIL PROTECTED] > Sent: Saturday, June 02, 2007 11:28 AM > To: Salim S I > Cc: lartc@mailman.ds9a.nl > Subject: Re: [LARTC] Multihome load balancing - kernel vs netfilter >

[LARTC] gw, lsrc in julian's patches

2007-05-09 Thread Alex Girchenko
In http://www.ssi.bg/~ja/dgd.txt I read: -- - key "gw" for ip_route_output used to select the right route for the gateway - key "lsrc" for ip_route_input used to find the best unicast route between this IP and the destination address (similar to output routing call but still makes t

[LARTC] julian's patches and custom routing

2007-05-05 Thread Alex Girchenko
I'm using a 2.6.20-15-ubuntu (shipped with feisty) kernel with Julian's patches applied and it's my 3rd day with tc, ip, ifconfig and the rest ;). Got 2 ADSL uplinks. What I need is an ability to manually configure uplink usage, so nothing like bonding by default. Failover is meant to be provided

Re: [LARTC] DNAT and Load Balancing

2007-03-02 Thread Alex Samad
-m mark --mark 0 -j mymark > Hi i know there was a thread on this methiod earlier, but has somebody put up a howto, or a wiki page on it ? alex signature.asc Description: Digital signature ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] DNAT and Load Balancing

2007-03-02 Thread Alex Samad
On Fri, Mar 02, 2007 at 07:22:13AM +0530, Manish Kathuria wrote: > On 3/2/07, Tom Lobato <[EMAIL PROTECTED]> wrote: > > > > > >Hi all! > > > > > >After that good thread "DGD patch not detecting dead gateway" I was > >able to set up a Load Balancing with ping based DGD (without Julian > >Ana

Re: [LARTC] Multiple uplinks, ssh connections hang

2007-02-27 Thread Alex Samad
On Tue, Feb 27, 2007 at 08:12:17AM +0700, Denny Zulfikar wrote: > Hello korey, > > I don't think your configuration will work well, because there're > balancing using "weight" connection. So, if you have > connection-oriented-application that must sure passing their traffic > only from one connect

Re: [LARTC] Split access, load balancing AND forwarding: HOW?

2007-02-23 Thread Alex Samad
On Fri, Feb 23, 2007 at 03:23:42PM +0800, Ming-Ching Tiew wrote: > From: "Luciano Ruete" <[EMAIL PROTECTED]> > > > > This solution works in theory and in practice, so plz, get your hands dirty > > before you post your next great idea. > > > > I understand your explanation fully but believe me I

Re: [LARTC] Routing problem (RTNETLINK answers: Invalid argument) on multiple internet link.

2007-02-14 Thread Alex Samad
On Wed, Feb 14, 2007 at 08:30:48AM +0100, Paul Viney wrote: > > > I still seem to have much the same problem. I no longer get ICMP > > > unreachable errors, but the packet just seems to disappear - I can't see > > > it being forwarded on any interface, nor can I find any kind of reply - > > > icmp

Re: [LARTC] Routing problem (RTNETLINK answers: Invalid argument) on multiple internet link.

2007-02-13 Thread Alex Samad
On Tue, Feb 13, 2007 at 10:54:51PM +0100, Paul Viney wrote: > Thanks for the advice, Alex. I've been able to add both default routes - I > hadn't considered using the metric to avoid using the VPN link. > I guess I wasn't very clear with my use of 64.233.183.103, wh

Re: [LARTC] Routing problem (RTNETLINK answers: Invalid argument) on multiple internet link.

2007-02-13 Thread Alex Samad
1.248.86 metric 20 default via 144.132.144.1 dev vlan2 src 144.132.147.156 metric 30 The difference for you should be in the default table, you will not need default proto static metric 5 nexthop via 144.132.144.1 dev vlan2 weight 1 nexthop via 10.20.20.168 dev ppp0 w

Re: [LARTC] Questions about mutiple providers

2007-01-29 Thread Alex Samad
On Mon, Jan 29, 2007 at 01:17:03PM +0100, Fabio Muzzi wrote: > > Hi, this is my first post to the list. > > I have googled a lot, and still cannot find a proper solution. I hope > someone here will be able to shed some light on my doubts. > > I have set up a firewall using kernel 2.6.15

Re: [LARTC] ip alias + dsl modem

2007-01-24 Thread Alex Samad
On Thu, Jan 25, 2007 at 12:14:56AM +0900, GodSharp wrote: > Hi Guys, > > Just wondering for some reason when I switched providers(DSL) IP aliasing > stopped working. And, I am not sure what kind of modem this is, the previous > one had some Ethernet ports at the back(it has a bult-in 4 port switch

Re: [LARTC] LARTC Wiki

2007-01-23 Thread Alex Samad
This link below gives the details on how to setup a multi link connection http://lartc.org/howto/lartc.rpdb.multiple-links.html Alex > > >

Re: [LARTC] LoadBalancing on many asimetric different dsl's.

2007-01-22 Thread Alex Samad
metric 5 > >nexthop via 144.132.144.1 dev vlan2 weight 1 > >nexthop via 10.20.20.230 dev ppp0 weight 20 > >default via 10.20.20.230 dev ppp0 src 60.241.248.86 metric 20 > >default via 144.132.144.1 dev vlan2 src 144.132.145.38 metric 30 > > > >

Re: [LARTC] LoadBalancing on many asimetric different dsl's.

2007-01-22 Thread Alex Samad
144.132.144.1 dev vlan2 src 144.132.145.38 metric 30 This works fine for me, I have tracked packets with tcpdump on both the server and the client. Alex > > Thanks! > > Jordi Segues > > On 22 Jan 2007 09:49:28 +0100, sAwAr <[EMAIL PROTECTED]> wrote: > &g

Re: [LARTC] multipath device round robin not working?

2007-01-16 Thread Alex Samad
On Mon, Jan 15, 2007 at 06:44:54PM -0600, Grant Taylor wrote: > On 01/15/07 15:20, [EMAIL PROTECTED] wrote: > >Wow, that's a complicated solution. Nicely done:) But I think that's a > >bit too complicated for my setup thx for the input anyway. > > Thanks. > > Indeed the set up is not simple.

Re: [LARTC] multipath device round robin not working?

2007-01-14 Thread Alex Samad
to guess but this line default via 10.0.0.1 dev eth0 costs less to use than default via 10.0.0.1 dev eth1 metric 1 so it should never use the second. I say guess cause I don't know what the default metric is if you do add one. What you want it to look something like i

Re: [LARTC] ipp2p

2006-06-22 Thread Alex
suggest using the latest, although beta version (0.8.1_rc1) of ipp2p. But that's just me. Alex ___ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] arp flood (offtopic?)

2005-10-19 Thread Alex
ed ips in the same subnet. Maybe dividing into multiple vlans would be a better idea? Regards, Alex - Original Message - From: "Marek Kierdelewicz" <[EMAIL PROTECTED]> To: Sent: Wednesday, October 19, 2005 9:04 PM Subject: Re: [LARTC] arp flood (offtopic?) Hi guys, H

[LARTC] arp flood (offtopic?)

2005-10-19 Thread Alex
Hi guys, Sorry if this is a little offtopic, but I was wandering what can one do to prevent/stop arp flooding ? Thanks, Alex -- This message has been scanned for viruses and dangerous content by LG-Network(http://www.lgnet.ro), and is believed to be clean

[LARTC] iptables MARK behaviour out of the box

2005-07-26 Thread alex
Hi all, Short question: what happens with the mark on a packet once it's out of the box? Is is usable in another computer in the network or the mark is only valid in the same box you've marked the packet? Thank you, Alex___ LARTC mailing list LARTC@mai

[LARTC] is the lartc documentation right about filters on HTB

2005-07-10 Thread alex
Hi, Just a short question: in documentation (http://lartc.org/howto/lartc.qdisc.filters.html) it appears that "Also, with HTB, you should attach all filters to the root!" . Is it older information or you can not attach filter to the inner qdiscs at all? Thank you, alex__

[LARTC] Multiple upload links on same eth

2004-08-30 Thread Alex
with aliases...   Anybody can help me here ?       Regards     Alex

[LARTC] Re: [ANNOUCE] iproute2 update

2004-06-08 Thread alex
technology that is quoted with kbits meaning 1024bit/s. -alex On Tue, 8 Jun 2004, Stephen Hemminger wrote: > A new version of the iproute2 utilities is available to handle the new > extensions for 2.6.7. > * Based on the last known good version of iproute2 from Alexy >

[LARTC] Re: [ANNOUCE] iproute2 update

2004-06-08 Thread alex
would change all multipliers (for input as well as output) to 1000 or 1024? That way, nothing existing will be broken, and a warning should be placed in documentation that without -k flag, results are misleading. I'll leave the default selection for -k/-K up to you. Alternatively, (tc

Re: [LARTC] second routing decision--when?

2004-04-29 Thread alex
Unfortunately, not that easy. Look at ipt_ROUTE (from netfilter) to do it. -alex On Thu, 29 Apr 2004, Egon Eckert wrote: > Hi, > > I'd like to mark locally generated packets in the OUTPUT chain and do > policy based routing (selecting one of two default gateways) based on

Re: [LARTC] ALTQ - Bandwidth Manager

2004-04-29 Thread alex
a) this has nothing to do with Linux. b) if you have to ask these questions, you will not be able to do it. -alex On Thu, 29 Apr 2004, Prajith wrote: > Hi, > > I have to port ALTQ(Alternate Queueing) software form the FreeBSD to QNX. > It's more like a bandwidth manager.

Re: [LARTC] tc feature request/bounty (fwd)

2004-04-17 Thread alex
test everything, setup test networks etc. > for 300$. Thanks to jamal's latest tc action patch, and some perl duct tape (essentially polling the load per index, and modifying the "capacity" based on incoming announcements), I'

[LARTC] tc feature request/bounty (fwd)

2004-04-12 Thread alex
ce_dump). Adding external traffic to policer structures is somewhat tricky, but I'm sure it is possible. At this point, I only care about EWMA, which isn't all that hard. Budget and bounty: 300$ Any takes? -alex ___ LARTC mailing li

Re: [LARTC] large routing table

2004-03-30 Thread alex
ixes this is probably 7000 addreses so on > each packet 7000 tests will be done. Incorrect. Linux route lookup is crappy, but not THAT crappy. Route-cache somewhat helps too. -alex ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/m

Re: [LARTC] large routing table

2004-03-30 Thread alex
oute for packet classification > or it can be simulated with netfilters connmark module. > then amount of test to be done will be more than half of active connections > number. Sorry - my bad, I thought that the poster *was* talking about using route (and realm) for packet classification and t

[LARTC] HTB & VoIP

2004-03-02 Thread Alex Landau
to 2 secs. Is there an option to put (for instance) all UDP traffic at the beginning of the output queue? Thanks, Alex ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[LARTC] HTB & VoIP

2004-03-02 Thread Alex Landau
o put (for instance) all UDP traffic at the beginning of the output queue? Thanks, Alex ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Neighbour table overflow

2004-02-24 Thread Alex
X. I use one class C private with private ips + another 2 class C for tunels. Maybe this message is because my users frequently scan the network with WS_PING to see what users are online (this produces arp-requests for each ip in that ip class)? Alex Iruc - Original Message - From: &q

Re: [LARTC] Neighbour table overflow

2004-02-21 Thread Alex
d to strange to happen all of the sudden in 1-3 hours time. So, maybe I'm wrong, but these messages are a bit too weird to happed so many at once. Any ideeas? Thanks Alex - Original Message - From: "Santiago J. Ruano Rincón" <[EMAIL PROTECTED]> To: "Alex

[LARTC] Neighbour table overflow

2004-02-21 Thread Alex
What is the cause for such a message while running kernel 2.6.1 on RH9 ? Neighbour table overflow. NET: 282 messages suppressed. Neighbour table overflow. Alex Iruc ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo

[LARTC] esfq & htb

2004-02-11 Thread Alex
(I don;t think so...) or do I have to get another patch. If so, from where? Alex Iruc Administrator Retea LG-NET http://www.hostingcenter.ro Suport Tehnic: [E

[LARTC] combining filters

2004-02-08 Thread alex
After few hours of looking, I couldn't find a way to combine ("and") different filters. Example: I need to police ingress traffic coming from certain source IPs (which are best expressed with u32 filter) and going to certain routes (which are best expressed with route filter). What I was tryin

[LARTC] iproute esfq patch & krnel 2.6.2

2004-02-08 Thread Alex
(I don;t think so...) or do I have to get another patch. If so, from where? Alex Iruc Network Administrator LG-NET http://www.hostingcenter.ro Suport Tehnic: [E

RE: [LARTC] Paid project/Netfilter target to match queue backlog - Traffic Engineering

2004-02-06 Thread alex
> Isn't the same possible in /lartc.org 12.3.2. Overlimit actions / and > "reclassify" option /which i din't used yet/. Interesting idea - Let me try if this works first. > next, you must use IMQ to pass every traffic from eth2, /because as i'm > thinking there isn't possible to do reclassify pack

[LARTC] Paid project/Netfilter target to match queue backlog

2004-02-05 Thread alex
Hello, If any of kernel hackers wants to make some money: For 300$: What I need is a netfilter match rule that would match on depth of a queue on a given device. Example: iptables -t mangle -I PREROUTING -m queue_backlog --device eth0.1 --depth-gt 10 -j If you can complete this in a reasonabl

[LARTC] HTB individual classes ?

2003-12-17 Thread Alex
each client of speed x in class 4, for each client of speed y in class 5, and so on.. 1 / \ / \ 2 3 / | \ / | \ 4 5 6 7 8 9 Thanks! Alex ___ LARTC mailing list / [

[LARTC] tcng ingress examples

2003-11-26 Thread Alex Ongena
Hi, I'am looking for tcng examples where ingress is used. Please post me some (working) examples, no need for explanation. Thank you Alex ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[LARTC] Can't use fwmark filters

2003-10-26 Thread Alex
gs.debian.org/215629 Here goes the story, thanks for any tip on the subject. Alex I would like to add a fwmark filter to the original HTB based LARTC "WonderShaper" script (http://lartc.org/wondershaper/). I am using a self compiled kernel from latest sarge kernel-source-2.4.22 an

[LARTC] What's wrong here? HELP PLEASE!!!!

2003-10-07 Thread Alex
t ceil 256kbit prio 5 /sbin/tc filter add dev eth1 parent 1:10 protocol ip prio 5 u32 match ip dst 192.168.254.11 flowid 4:12 etc (full script at http://retea.hostingcenter.ro/htb.txt) Thanks! Alex ___ LARTC mailing list / [EMAIL PROTECTED] http://

Re: [LARTC] htb errors, wrong patch?

2003-10-04 Thread Alex
I have everything cbq/htb and all the QoS stuff compiled directly in the kernel, not as a module. The script is at http://retea.hostingcenter.ro/htb.txt since is about 46k and is too big to post here. Thanks. Alex - Original Message - From: "Stef Coene" <[EMAIL PROTECTE

[LARTC] htb errors, wrong patch?

2003-10-03 Thread Alex
:2" is unparsable RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument Thanks! Alex ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Re: HTB and metro+int. limits part2

2003-10-01 Thread Alex
I forgot to say that I have put my script on http://retea.hostingcenter.ro/htb.txt Maybe someone could lead to to the correct sintax if there's something wrong. Alex - Original Message - From: "Stef Coene" <[EMAIL PROTECTED]> To: "Alex" <[EMAIL PROT

Re: [LARTC] Re: HTB and metro+int. limits

2003-10-01 Thread Alex
fter marking of the packets. Thanks again. Alex - Original Message - From: "Stef Coene" <[EMAIL PROTECTED]> To: "Alex" <[EMAIL PROTECTED]>; "Lartc" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, October 01, 2003 12:59 PM

[LARTC] Re: HTB and metro+int. limits

2003-09-30 Thread Alex
ternational how would the "tc" command be? Something like: /sbin/tc class add dev eth2 parent 1:2 classid 2:11 htb rate 50kbit ceil 100kbit prio 5 /sbin/tc filter add dev eth2 parent 1:0 protocol ip prio 5 u32 match ip dst 192.168.254.10 flowid 1:11 Would this be the correct commands? Thanks

[LARTC] HTB and metro+int. limits

2003-09-30 Thread Alex
country. What I don't know is how to continue the script with assigning lower limits to everything else not going from ip's in --set-mark 6. Maybe some of can enlighten me about this. Thanks, Alex #!/bin/sh #Mark metro packets /sbin/iptables -t mangle -A PREROUTING -i eth2 -d 213.154.1

Re: [LARTC] Official RH kernel documents, and load balancing

2003-09-22 Thread Alex
and then configure lilo or grub, whatever you have. btw, if you do "make bzlilo" it will work even if you have grub installed instead of lilo ( it will copy the thing to /boot but you will also see a error about lilo.conf, but nothing to worry about ) Alex - Original Message ---

[LARTC] multiple uplink which patch?

2003-09-09 Thread Alex
ybe I'm missing something... Thanks for help. Alex btw, on lartc.org in the howto at split access section there is a mention about "Reader Rod Roark notes: 'If $P0_NET is the local network and $IF0 is its interface, the following additional entries are desirable: ip route add $P0

[LARTC] Dynamic bandwith

2003-09-09 Thread Alex
t I found on the net are a little confusing. I also need to prioritize interactive traffic (IRC and yahoo/msn messengers) and ICMP ping (to impress my boss :-) ). The documentation has done nothing but to confuse me in this situation. Please help me with this! Thank you in advance for any

[LARTC] Equalize patch on kernel newer that 2.4.18????

2003-09-06 Thread Alex
Does this patch work on kernel 2.4.21 or 2.4.22? (I'm curently using 2.4.21 and planning to switch to 2.4.22 in near future) Thanks. Alex - Original Message - From: "Martin A. Brown" <[EMAIL PROTECTED]> To: "Jihoon Chung" <[EMAIL PROTECTED]>

Re: [LARTC] where is "equalize" kernel patch?

2003-09-06 Thread Alex
Does this patch work on kernel 2.4.21 or 2.4.22? (I'm curently using 2.4.21 and planning to switch to 2.4.22 in near future) Thanks. Alex - Original Message - From: "Martin A. Brown" <[EMAIL PROTECTED]> To: "Jihoon Chung" <[EMAIL PROTECTED]>

[LARTC] split access 2 uplinks

2003-08-29 Thread Alex
help me at all. Thanks, Alex Here the script that I use: (192.168.55.1 is another router which actualy has the second line conected physicaly and on that router I do SNAT for the squid machine) IF0="eth1" IF1="eth2" IF2="eth0" IP0="192.168.254.125" IP1=&qu

Re: [LARTC] Monitoring traffic

2003-08-27 Thread Alex
maybe some of you know any better solutions? Alex - Original Message - From: "Gabriel Lorenzo" <[EMAIL PROTECTED]> To: "Alex" <[EMAIL PROTECTED]> Sent: Wednesday, August 27, 2003 12:32 AM Subject: Re: [LARTC] Monitoring traffic > Here is my tip. >

[LARTC] Monitoring traffic

2003-08-26 Thread Alex
, just something to show them hou much traffic they did. I'm currently using net-acct mysql but with little success because on RH9 the netacctd daemon dies unexpectedly sometimes without any error. Thanks! Alex ___ LARTC mailing list / [EMAIL PROT

[LARTC] Routing question

2003-06-06 Thread Alex Schaft
r 10.1.1.5 I've looked over the adv routing howto, but can't see how I would implement it according to section 4.2.1, as I won't always know our ip address for the adsl connection. Could someone point me in the right direction? Thanks, Alex

[LARTC] tc usage

2003-06-03 Thread Alex Zeffertt
. In the example, however, classes are being attached to other classes. Can anybody explain to me how this works? Sorry if this is a silly question. Thanks, Alex snip 9.5.5.1. Sample configuration Functionally almost identical to the CBQ sample configuration above: # tc qdisc ad

[LARTC] logging traffic on port/remote host/localhost

2003-02-09 Thread Alex Polite
gging in iptables but reading the logs is kind of tiresome. I rather have something like iptraf but that can be run after the fact. alex -- Alex Polite http://plusseven.com/gpg ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/ma

Re: [LARTC] Allowing CVS, RCP & SCP

2002-07-04 Thread Alex Bennee
bert hubert said: > On Thu, Jul 04, 2002 at 02:01:07PM +0100, Alex Bennee wrote: >> A. Peter Mee said: >> > >> > Could someone give me some pointers to achieving stable cvs and rcp >> > access through a fairly restrictive firewall. >> > >> &g

Re: [LARTC] Allowing CVS, RCP & SCP

2002-07-04 Thread Alex Bennee
PROTECTED] > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ Alex www.bennee.com/~alex/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] TCP/UDP traffic priority.

2002-05-28 Thread Alex Bennee
rough differnt traffic shapers. See the Section 9 of the lartc HOWTo: http://lartc.org/HOWTO//cvs/2.4routing/html/c427.html For an intro to the options you have available. Alex www.bennee.com/~alex/ ___ LARTC mailing list / [EMAIL PROTECTED] http://m

Re: [LARTC] Beginner

2002-05-23 Thread Alex Bennee
l and write rules accordingly There is nothing wrong with having multiple layers of firewalls. It means your haxor has several layers of security to beat - security through depth. But you can just use iptables on your internal firewall as well. No point learning new s

Re: [LARTC] ipt_connbytes iptables match for shaping

2002-05-20 Thread alex
mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ -- [EMAIL PROTECTED] http://www.bennee.com/~alex/ ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] (no subject)

2002-04-19 Thread Alex Bennee
lassifications I use (which go by traffic type) but use network matches instead. You should also read the htb manual (http://luxik.cdi.cz/~devik/qos/htb/) as it contains some useful worked examples that are pretty clear about the paremeters for htb shapers. Alex www.bennee.com/~alex/ ___

Re: [LARTC] A tc htb/iptables rate control script for ADSL

2002-04-17 Thread Alex Bennee
ables does this already but if I can match and tag a packet based on the time of the connection I can still allow new connections to get priority of long lived downloads. This may involve writting a new kernel module as a netfilter extension but it would be the iceing on the cake to my setup :-) Alex w

[LARTC] A tc htb/iptables rate control script for ADSL

2002-04-16 Thread alex
script that can be found on my websites CVS pages (under software) but its not fully integrated yet. Enjoy, Alex. function setup_shaping () { # Setup POSTROUTING marking on dsl output # needed for QoS type hacks # 1 - outgoing interactive (ssh) # 2 - outgoing file stuf

[LARTC] Using tc with iptables marking.

2002-04-16 Thread Alex Bennee
k in relation to the filters. I've been looking for any good examples that show iptables -j MARK, prio and filter being used together but have yet to come up with any good ones. If I get this to work your welcome to use it in the FAQ :-) Alex www.bennee.com/~alex/ _

Re: [LARTC] Determining tbf parameters

2002-04-01 Thread Alex Leyva
On Thu, 28 Mar 2002, Kurt Wagner wrote: > Howdi Alex, > > On Fri, 22 Mar 2002, Alex Leyva wrote: > > > I've been triying with diferent values for burst, limit and latency, but > > we cant understand how to determine the correct values for them. > > > Now,

[LARTC] Determining tbf parameters

2002-03-22 Thread Alex Leyva
ormal?. Thanks. Alex Leyva Gobierno del Distrito Federal Oficialia Mayor Comite Ejecutivo de Desarrollo Informatico Direccion de Nuevas Tecnologias ___ LARTC mailing list / [EMAIL PROTECTED] http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/