Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Alexander Wilms
On Sonntag 07 September 2008, Tom Eastep wrote: > Alexander Wilms wrote: > > Btw, here is the working RPM: > > > > http://download.opensuse.org/repositories/home:/atzewilms/openSUSE_11.0/ > > Thanks, Alex. > > -Tom Filled bug report. Nothing known yet to the bugzilla database. Let's see how fast

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Tom Eastep
Alexander Wilms wrote: On Sonntag 07 September 2008, Tom Eastep wrote: Alexander Wilms wrote: Any hint about the name of that patch? Will try to build a fixed version in the opensuse build service. No -- happened last spring though IIRC. You should be able to find it in the list archives. -To

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Tom Eastep
Alexander Wilms wrote: Btw, here is the working RPM: http://download.opensuse.org/repositories/home:/atzewilms/openSUSE_11.0/ Thanks, Alex. -Tom -- Tom Eastep\ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] P

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Alexander Wilms
On Sonntag 07 September 2008, Tom Eastep wrote: > Alexander Wilms wrote: > > On Sonntag 07 September 2008, Tom Eastep wrote: > >> Alexander Wilms wrote: > >>> On Sonntag 07 September 2008, Tom Eastep wrote: > Alexander Wilms wrote: > > Any hint about the name of that patch? > > Will tr

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Tom Eastep
Alexander Wilms wrote: On Sonntag 07 September 2008, Tom Eastep wrote: Alexander Wilms wrote: On Sonntag 07 September 2008, Tom Eastep wrote: Alexander Wilms wrote: Any hint about the name of that patch? Will try to build a fixed version in the opensuse build service. No -- happened last spr

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Alexander Wilms
On Sonntag 07 September 2008, Tom Eastep wrote: > Alexander Wilms wrote: > > On Sonntag 07 September 2008, Tom Eastep wrote: > >> Alexander Wilms wrote: > >>> Any hint about the name of that patch? > >>> Will try to build a fixed version in the opensuse build service. > >> > >> No -- happened last

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Alexander Wilms
On Sonntag 07 September 2008, Tom Eastep wrote: > Alexander Wilms wrote: > > Any hint about the name of that patch? > > Will try to build a fixed version in the opensuse build service. > > No -- happened last spring though IIRC. You should be able to find it in > the list archives. > > -Tom Found.

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Tom Eastep
Tom Eastep wrote: Alexander Wilms wrote: Any hint about the name of that patch? Will try to build a fixed version in the opensuse build service. No -- happened last spring though IIRC. You should be able to find it in the list archives. Last posts occurred in January on the development lis

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Tom Eastep
Alexander Wilms wrote: Any hint about the name of that patch? Will try to build a fixed version in the opensuse build service. No -- happened last spring though IIRC. You should be able to find it in the list archives. -Tom -- Tom Eastep\ Nothing is foolproof to a sufficiently talented

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Alexander Wilms
On Sonntag 07 September 2008, Tom Eastep wrote: > Tom Eastep wrote: > > Alexander Wilms wrote: > >> OK, lets call it iproute2 issue with the iproute2 package of OS11. > >> > >> Anything known like that? > > > > Yes -- this bug showed up in Debian too but the Debian folks managed to > > find it quic

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Tom Eastep
Tom Eastep wrote: Alexander Wilms wrote: OK, lets call it iproute2 issue with the iproute2 package of OS11. Anything known like that? Yes -- this bug showed up in Debian too but the Debian folks managed to find it quickly. Apparently the SuSE team haven't There was a hack in Shorewall

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Tom Eastep
Alexander Wilms wrote: OK, lets call it iproute2 issue with the iproute2 package of OS11. Anything known like that? Yes -- this bug showed up in Debian too but the Debian folks managed to find it quickly. Apparently the SuSE team haven't -Tom -- Tom Eastep\ Nothing is foolproof to a

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Alexander Wilms
OK, lets call it iproute2 issue with the iproute2 package of OS11. Anything known like that? Alex On Sonntag 07 September 2008, Tom Eastep wrote: > Alexander Wilms wrote: > > Hi Tom, > > > > found an issue with 4.2-RC1. > > > > Same config worked on 10.3, copying it to a 11 host causes: > > > >

Re: [Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Tom Eastep
Alexander Wilms wrote: Hi Tom, found an issue with 4.2-RC1. Same config worked on 10.3, copying it to a 11 host causes: What is "flowid"? Illegal "police" ERROR: Command "tc filter add dev dsl0 parent : protocol ip pref 10 u32 match ip src 0.0.0.0/0 police rate 16490kbit burst 10k drop

[Shorewall-users] tcdevices in 4.2-RC1 and opensuse11

2008-09-07 Thread Alexander Wilms
Hi Tom, found an issue with 4.2-RC1. Same config worked on 10.3, copying it to a 11 host causes: What is "flowid"? Illegal "police" ERROR: Command "tc filter add dev dsl0 parent : protocol ip pref 10 u32 match ip src 0.0.0.0/0 police rate 16490kbit burst 10k drop flowid :1" Failed Conte

Re: [Shorewall-users] Problem with MultiISP configuration (no rc-rules), please help!

2008-09-07 Thread Tom Eastep
Tom Eastep wrote: Tom Eastep wrote: CHAUSSEE Pierre wrote: It seems the file is not easy to download, and it's to big to just be printed in the message. Here's a link which allows you to download it : http://www.clyl.net/dump.shorewall.bz2 Once again please help I've been, trying to reset e

Re: [Shorewall-users] Problem with MultiISP configuration (no rc-rules), please help!

2008-09-07 Thread Tom Eastep
Tom Eastep wrote: CHAUSSEE Pierre wrote: It seems the file is not easy to download, and it's to big to just be printed in the message. Here's a link which allows you to download it : http://www.clyl.net/dump.shorewall.bz2 Once again please help I've been, trying to reset everything three t

Re: [Shorewall-users] Weird TCP problem

2008-09-07 Thread Tom Eastep
Does this problem only occur with SSH or do you see it happening with other applications? When running tcpdump did you look at all traffic on the server or only the traffic you were interested in? -Tom Gordon Messmer wrote: Tom Eastep wrote: It doesn't "run shorewall" -- Shorewall is used t

Re: [Shorewall-users] Problem with MultiISP configuration (no rc-rules), please help!

2008-09-07 Thread Tom Eastep
CHAUSSEE Pierre wrote: It seems the file is not easy to download, and it's to big to just be printed in the message. Here's a link which allows you to download it : http://www.clyl.net/dump.shorewall.bz2 Once again please help I've been, trying to reset everything three times, I can't see w

Re: [Shorewall-users] Problem with MultiISP configuration (no rc-rules), please help!

2008-09-07 Thread CHAUSSEE Pierre
It seems the file is not easy to download, and it's to big to just be printed in the message. Here's a link which allows you to download it : http://www.clyl.net/dump.shorewall.bz2 Once again please help I've been, trying to reset everything three times, I can't see what's wrong. > I'm sorr

Re: [Shorewall-users] Weird TCP problem

2008-09-07 Thread Gordon Messmer
Tom Eastep wrote: > > It doesn't "run shorewall" -- Shorewall is used to configure Netfilter > on the box; once 'shorewall start' is finished, there is no Shorewall > code running there at all. I know, I understand how it works. I just didn't phrase that very well, and I apologize. If you we

Re: [Shorewall-users] Problem with MultiISP configuration (no rc-rules), please help!

2008-09-07 Thread CHAUSSEE Pierre
I'm sorry i forgot it. Here it is in the attached files. dump.shorewall.bz2 Description: application/bzip2 Pierre CHAUSSEE wrote: Hi, I'm trying to set up a multi ISP configuration. I can make it work without shorewall, except for incoming connections : i want to be able to connect to an