[leaf-user] ip_conntrack: table full, dropping packet

2007-11-05 Thread Ricardo Kleemann
Hi I recently started having this problem on my leaf box. I'm guessing this is being caused by floods hitting the box. How can I better diagnose this? I know I can increase the /proc/sys/net/ipv4/ip_conntrack_max but that's not fixing the problem. Am I able to figure out which interface is get

Re: [leaf-user] ip_conntrack: table full, dropping packet

2007-11-05 Thread Erich Titl
Ricardo Ricardo Kleemann wrote: > Hi > > I recently started having this problem on my leaf box. I'm guessing this is > being caused by floods hitting the box. > > How can I better diagnose this? I know I can increase the > /proc/sys/net/ipv4/ip_conntrack_max but that's not fixing the problem.

Re: [leaf-user] ip_conntrack: table full, dropping packet

2007-11-05 Thread Ricardo Kleemann
Thanks Erich. > These two links may help: > > http://osdir.com/ml/linux.leaf.user/2005-04/msg00089.html > > http://www.wallfire.org/misc/netfilter_conntrack_perf.txt > Those links show how to change the conntrack_max. But my problem is really trying to prevent the table from filling up. I'm sure

Re: [leaf-user] ip_conntrack: table full, dropping packet

2007-11-05 Thread Erich Titl
Ricardo Kleemann wrote: > Thanks Erich. > >> These two links may help: >> >> http://osdir.com/ml/linux.leaf.user/2005-04/msg00089.html >> >> http://www.wallfire.org/misc/netfilter_conntrack_perf.txt >> > > Those links show how to change the conntrack_max. But my problem is > really trying to pr

Re: [leaf-user] Problem with buildtool.pl and Config::General

2007-11-05 Thread Martin Hejl
oops, wrong list... Martin Hejl wrote: > Hi Erich, > > please keep replies on the list > >> Thanks for the info, I tried to diff the buildtool tree, only got my own >> changes though. >> >> cvs diff: Diffing . (...) > That's not how "cvs diff" works. From the man page: > > "The default action i

Re: [leaf-user] Problem with buildtool.pl and Config::General

2007-11-05 Thread Erich Titl
Martin Martin Hejl schrieb: > oops, wrong list... > > Martin Hejl wrote: >> Hi Erich, >> >> please keep replies on the list Fingers too fast :-( >> >>> Thanks for the info, I tried to diff the buildtool tree, only got my own >>> changes though. >>> >>> cvs diff: Diffing . (...) >> That's not ho

Re: [leaf-user] Bering uClibc AS a http load balancer

2007-11-05 Thread Stephen More
Have you looked into http://haproxy.1wt.eu/ ? I think the combination of haproxy and keepalived on a LEAF box would be ideal. -Steve More On 8/14/07, Adam Niedzwiedzki wrote: > I did some reading and found http://www.linuxvirtualserver.org/ > But is it a load balancer I guess when I say load ba

[leaf-user] DNS resolution for Multi-ISP

2007-11-05 Thread imap
Hello, I trying to setup multi-isp configuration (using latest bering-uClibc 3.1-beta1), and began reading the corresponding doc: http://www.shorewall.net/3.0/MultiISP.html I am not clear on how the DNS resolution happens if a DNS request from one provider goes to the other provider's

Re: [leaf-user] [Shorewall-users] DNS resolution for Multi-ISP

2007-11-05 Thread Tom Eastep
[EMAIL PROTECTED] wrote: > Hello, > > I trying to setup multi-isp configuration (using latest bering-uClibc > 3.1-beta1), and began reading the corresponding doc: > http://www.shorewall.net/3.0/MultiISP.html > I am not clear on how the DNS resolution happens if a DNS request > from one

Re: [leaf-user] [Shorewall-users] DNS resolution for Multi-ISP

2007-11-05 Thread imap
> > I trying to setup multi-isp configuration (using latest bering-uClibc > > 3.1-beta1), and began reading the corresponding doc: > > http://www.shorewall.net/3.0/MultiISP.html > > I am not clear on how the DNS resolution happens if a DNS request > > from one provider goes to the other

Re: [leaf-user] [Shorewall-users] DNS resolution for Multi-ISP

2007-11-05 Thread Tom Eastep
[EMAIL PROTECTED] wrote: >>> I trying to setup multi-isp configuration (using latest bering-uClibc >>> 3.1-beta1), and began reading the corresponding doc: >>> http://www.shorewall.net/3.0/MultiISP.html >>> I am not clear on how the DNS resolution happens if a DNS request >>> from one p

Re: [leaf-user] [Shorewall-users] DNS resolution for Multi-ISP

2007-11-05 Thread imap
> >>> I trying to setup multi-isp configuration (using latest bering-uClibc > >>> 3.1-beta1), and began reading the corresponding doc: > >>> http://www.shorewall.net/3.0/MultiISP.html > >>> I am not clear on how the DNS resolution happens if a DNS request > >>> from one provider goes to

Re: [leaf-user] [Shorewall-users] DNS resolution for Multi-ISP

2007-11-05 Thread Tom Eastep
[EMAIL PROTECTED] wrote: > I trying to setup multi-isp configuration (using latest bering-uClibc > 3.1-beta1), and began reading the corresponding doc: > http://www.shorewall.net/3.0/MultiISP.html > I am not clear on how the DNS resolution happens if a DNS request >

Re: [leaf-user] [Shorewall-users] DNS resolution for Multi-ISP

2007-11-05 Thread imap
> > I trying to setup multi-isp configuration (using latest bering-uClibc > > 3.1-beta1), and began reading the corresponding doc: > > http://www.shorewall.net/3.0/MultiISP.html > > I am not clear on how the DNS resolution happens if a DNS request > > from one provid