Re: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-24 Thread Jason Boxman
Andraz Sraka wrote: > re > > On Thu, 2006-03-23 at 19:20 -0500, Jason Boxman wrote: > >> I like L7, but be sure you're ready to write some pattern matches. I've >> been >> using ipp2p[1] and it matches all my p2p traffic. ymmv of course. >> >> [1] http://www.ipp2p.org/ > > can newer 2.6 (2.6.15.x

Re: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-24 Thread Klaus
Hi, Andraz Sraka wrote: > re > > On Thu, 2006-03-23 at 19:20 -0500, Jason Boxman wrote: > > >>I like L7, but be sure you're ready to write some pattern matches. I've been >>using ipp2p[1] and it matches all my p2p traffic. ymmv of course. >> >>[1] http://www.ipp2p.org/ > > > can newer 2.6

Re: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-24 Thread Andraz Sraka
re On Thu, 2006-03-23 at 19:20 -0500, Jason Boxman wrote: > I like L7, but be sure you're ready to write some pattern matches. I've been > using ipp2p[1] and it matches all my p2p traffic. ymmv of course. > > [1] http://www.ipp2p.org/ can newer 2.6 (2.6.15.x) kernels be patched with ipp2p ?

Re: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Jason Boxman
On Thursday 23 March 2006 11:39, Andraz Sraka wrote: > On Thu, 2006-03-23 at 16:18 +, Roberto Scattini wrote: > > maybe this url can help you, but my knowledge stops there... :( > > http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html > >

RE: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Andraz Sraka
On Thu, 2006-03-23 at 16:18 +, Roberto Scattini wrote: > maybe this url can help you, but my knowledge stops there... :( > http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html sounds promising .. regards, Andraz -- BOFH excuse #450:

Re: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Philip Gaw
Andraz Sraka wrote: re On Thu, 2006-03-23 at 11:15 +, Roberto Scattini wrote: hi, you could try with this http://l7-filter.sourceforge.net/ they have a good howto and some sample scripts (for bridge and non-bridge setup). well can l7-filter be used with etables? Because vlan is

Re: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Philip Gaw
Andraz Sraka wrote: re On Thu, 2006-03-23 at 16:58 +0100, Carlos Blanquer wrote: I recommend (so I haven't done it cos I have no needs up now) use FreeBSD to do that. Bridging in BSD has more sense than do it in a Linux box. that was my second best choice ;-] It's totally possi

RE: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Roberto Scattini
i dont know too much about cisco. i have used layer7 on a linux bridge using br-nf patch. maybe this url can help you, but my knowledge stops there... :( http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html Roberto Scattini On Thu, 2006-03-23 at 11:15 +, Roberto Scattini wrote: > hi,

Re: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Andraz Sraka
re On Thu, 2006-03-23 at 16:58 +0100, Carlos Blanquer wrote: > I recommend (so I haven't done it cos I have no needs up now) use > FreeBSD to do that. Bridging in BSD has more sense than do it in a > Linux box. that was my second best choice ;-] > It's totally possible, you can use any script

RE: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Andraz Sraka
re On Thu, 2006-03-23 at 11:15 +, Roberto Scattini wrote: > hi, you could try with this > > http://l7-filter.sourceforge.net/ > > they have a good howto and some sample scripts (for bridge and > non-bridge setup). well can l7-filter be used with etables? Because vlan is trunked (cisco term

Re: [LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Carlos Blanquer
On 3/23/06, Andraz Sraka <[EMAIL PROTECTED]> wrote: reI would like to do some firewalling and p2p shaping/limiting on one ofthe vlans in my network and I was thinking of using linux box astransparent bridged firewall/limiter. For this I'm planning to use AMD64 2.2Ghz box with 2 1gbit NIC (Broadcom

[LARTC] linux box as vlan p2p limiter and firewall?

2006-03-23 Thread Andraz Sraka
re I would like to do some firewalling and p2p shaping/limiting on one of the vlans in my network and I was thinking of using linux box as transparent bridged firewall/limiter. For this I'm planning to use AMD64 2.2Ghz box with 2 1gbit NIC (Broadcom 5721), that will be bridged. The box must be tot