in the link above.
regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliances
,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http
are only shaping traffic going through it),
then you can use egress queues on the LAN interface.
regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435
,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http
to implement,
and violate far too many RFCs...
regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax
any body done that???
I still don't really understand what's different between your setup and all the other
people who have 2 DSL connections to the internet.
Regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL
anyone used it on ipsec0 + eth0 devices for shaping ?
and lastly, any difference between the IMQ implementation on 2.4, and that on 2.6 ?
Are they both still being developed ?
thanks,
--
~~~
Damion de Soto - Software Engineer email
don't worry about people bypassing it manually)
Yeah, i've wondered if you could do that and get it working.
regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph
use a HTB qdiscs
on the outgoing (lan) interface which would do a better job.
regards
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom
,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http
just changed to egress shaping on both interfaces (since it's a gateway router).
I vaguely recall someone else discussing this on the list recently - can't remember
what the result was though.
--
~~~
Damion de Soto - Software
,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
and fixes the routes.
Then, wait, try again later and see if eth2 is working again.
Regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
it on in /proc/sys/net/ipv4/ip_forward ?
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891
as to exactly what's going wrong, then
perhaps someone could help you fix it yourself and not compromise the security of
your system.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company
.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http
is weight 1 ?
If you want the traffic balanced equally per-speed, yes.
It won't be exact though.
Higher number meaning better bandwidth ?
Yes, A higher weighting means a higher preference.
regards,
--
~~~
Damion de Soto - Software
that.
regards
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security
I shouldn't always
set it to the MTU size ?
If 2 classes are fulfulling their rate and you want them to share unequally, instead
of making the quantums different of each one, why not just change the prio ?
regards,
--
~~~
Damion de
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliances
prio 11 u32 match ip tos 0x08 0xff
flowid 1:30
regards
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions
people uploading TO your ftp server (same as you
downloads) or downloading FROM your ftp server ? (you uploading)
Regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph
,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
://lartc.org/
___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
--
~~~
Damion de Soto - Software Engineer email: [EMAIL
device.
(or one of the other suggestions that have been discussed recently)
regards
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom
.
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
(basically, you're missing kernel modules/config)
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph
ip protocol 0x33 0xff
(AH proto 51)
regards
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax
that the 'tc qdisc cbq' commands are failing - probabaly because
you don't have the cbq module in your kernel.
but, it could be the filter commands (u32 module), or something else.
regards,
--
~~~
Damion de Soto - Software
?
If that is a PC on your LAN, and you have a fully routed subnet, and all your
qdiscs/classes are setup correctly, then yes, those filters should work.
otherwise no.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED
,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
should use the ppp device, because you'll only get
PPPoE packets on the ethernet device, and you won't be able to shape
them.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company
.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
why they wouldn't.
You should be able to just create all your tc rules on the 'china' device.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
are very helpful.
regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
to borrow extra bandwidth from the faster ones (when
they're not in use), or do I need to specify the ceiling parameter to allow that?
I'm a bit unsure of the default behaviour of the htb qdisc.
thanks
--
~~~
Damion de Soto - Software
,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company ---ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
by
/sec /minute /hour /day postfixes]
--limit-burst numbernumber to match in a burst, default 5
regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard Company
**
If that doesn't work, you may need to ask the FreeS/WAN guys since it might be an
erouting problem on GATEWAY B.
That is assuming there is no NAT or Masquerading occuring anywhere.
Regards,
--
~~~
Damion de Soto - Software Engineer email
Red Hat Linux 9.0.
There is a lot of information about this - most linux computers are used in similar
ways.
just use google.
Regards
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear - A CyberGuard
-mss XXX
although i've never done this myself...
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax
ports
NOPRIOPORTDST=
It's doing exactly what it should be doing.
regards,
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http
/lartc.rpdb.html#LARTC.RPDB.SIMPLE
and maybe:
http://linux-ip.net/html/ch-routing.html
http://linux-ip.net/gl/ip-cref/
it's pretty easy once you work out what needs to happen.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED
misunderstand?
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security
.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http
)
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
://lartc.org/howto/lartc.cookbook.synflood-protect.html
and
http://lartc.org/howto/lartc.cookbook.ultimate-tc.html
I'm not sure where examples are of 'estimator' usage.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL
addif br0 gre1
brctl addif br0 eth1
ifconfig br0 10.4.1.1 netmask 255.255.255.0 broadcast 10.4.1.255
regards
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph
de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
also want to change the 'src' to 'dst'.
regards.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax
/man/man2html?tc+8
but for examples, you're best to look at
http://www.docum.org/ or http://lartc.org/howto/
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7
shouldn't be able to either use different u32 filters for
matching the different networks, then you can direct them into whichever class/qdiscs
are appropriate for that speed network.
--
~~~
Damion de Soto - Software Engineer
de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
dev environment.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
it try to go through 208.53.164.254?
does it go anywhere after ?
good luck.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded
using prio qdisc on a imq device.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891
efficient) way with the
ingress policer.
last lines in:
http://lartc.org/howto/lartc.cookbook.ultimate-tc.html
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7
.
good luck.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security
then they're never going to do anything useful, unless your application is
specificaly listening on 127.0.0.1 ?
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7
that knew about QoS.
that's my 2c worth.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7
for the classes.
htb qdiscs don't need to know any speeds.
regards.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions
where you're using it.
different qdiscs/classes use different things.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb: http://www.snapgear.com
://www.emule-project.net/faq/ports.htm
and in the top of the wondershaper script, it allows you to enter
# low priority source ports
NOPRIOPORTSRC=
# low priority destination ports
NOPRIOPORTDST=
--
~~~
Damion de Soto - Software Engineer
. If you want to try this path, let me know and i'll get you the
patches, otherwise you may want to try the vtund approach, which may be easier.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear
:(
If it supports modules, you can just build and insert the bridge.o module.
Otherwise, well... you won't be able to build a bridge.
good luck.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear
you might be able to get away with using a single network card
and aliased interfaces in the linux machine, but this would make traffic shaping much
more difficult than it needs to be (and probably slower too).
--
~~~
Damion de Soto
.
--
~~~
Damion de Soto - Software Engineer email: [EMAIL PROTECTED]
SnapGear --- ph: +61 7 3435 2809
| Custom Embedded Solutions fax: +61 7 3891 3630
| and Security Appliancesweb
71 matches
Mail list logo
