Re: [LARTC] Matching with Layer7 vs. IPP2P

2006-04-19 Thread Jandre Olivier
I was just about to post the same post, I currently use ipp2p and it works pretty well, It just doesnt seem to track morpheous(fasttrack) protocols, otherwise it works pretty well. I have quite alot of connections and havent seen any performance issues. My next step is to add L7 as well with

[LARTC] failover routing

2006-02-01 Thread Jandre Olivier
Hi Guys, I would just like to have advice and pointers of the best way would be, Someting like BGP or OSPF? I have 2 internet connections at diffrent locations. let say connection A and B 1.) router A has a fast internet connection and a seperate interface for clients using /lan/pppoe/ipsec

Re: [LARTC] Allowing certain IP to browse

2006-01-19 Thread Jandre Olivier
howdy, iptables will help u here for starters /sbin/iptables -A FORWARD -s 192.168.x.2/32 -p tcp --dport 80 -j ACCEPT /sbin/iptables -A FORWARD -s 192.168.x.2/32 -p tcp --dport 25 -j ACCEPT /sbin/iptables -A FORWARD -s 192.168.x.2/32 -j DROP similiar setup for the rest, this is not very clean

Re: [LARTC] MSN keeps disconnecting with load balancing

2005-11-14 Thread Jandre Olivier
I had similiar problems, re-reading the docs seemed to solved my problem, when u create your routing tables, u must make sure, the packet is returning on the same interface, cause what I found happens, that after the caching expired, all my downloads use to break, including msn this is an

Re: [LARTC] simple routing query

2005-11-11 Thread Jandre Olivier
How do I disable the zeroconf route so that the system will boot without the 169.254.0.0 / 255.255.0.0 route? by Cynthia Davis Symptom: Every time the system boots, the zeroconf route (169.254.0.0) is enabled. You manually disable it by turning off the firewall and remove the route with

Re: [LARTC] Interfaces basic question

2005-09-29 Thread Jandre Olivier
Hey Marius, u can only run the qdisc per interface, so if u have tc qdisc add dev eth0 root handle 1: htb default 30 it will be applied to eth0:0 , eth0:1 aliases as well U can shape on the one interface, your iptables commands must just be very specific. hope it helps J Marius Corici

[LARTC] src routing question

2004-09-09 Thread Jandre Olivier
Howzit guys, I have a question that has been boggling my mind: i have 2 servers( firewalls) 1 server connected to main ISP and another to another ISP( only certain traffic 195.0.0.0/8) Server 1 to main ISP: lan:eth0 192.168.1.0/24 outside: eth1 196.15.203.194/30 gw 196.15.203.193 DMZ: