boerde.lists.lartc
  Home FAQ Contact Sign in
boerde.lists.lartc only
 
Advanced search
March 2008
motuwethfrsasuw
     12 9
3456789 10
10111213141516 11
17181920212223 12
24252627282930 13
31       14
2008
 Jan   Feb   Mar   Apr 
 May   Jun   Jul   Aug 
 Sep   Oct   Nov   Dec 
2008 2007 2006  
total
boerde.lists.lartc Profile…
RELATED GROUPS

POPULAR GROUPS

more...

 Up
  me and my uncle fucking each other         


Author: yenc
Date: Mar 1, 2008 10:45

PORNOLATION RELEASE
no comments
  [LARTC] source policy routing and SNAT - wrong hardware adress         


Author: Markus
Date: Feb 23, 2007 18:05

Hi,

when using diffrent routing tables, outgoing packets after SNAT always have
hw-adresses as if the packed was coming from my machine. So a forwarded
packet to default gw x on eth0 gets hw-adresses as if the same packet with
origin loopback was routed to default gw y on network wlan0 which is
diffrent.
I do "ip rule add iif lo table mine" and some "ip route add ... table mine"
for local generated traffic. My "main" rt is configured for forwared traffic.
"iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 192.168.1.10" for NAT.
(eth1 <-> [NAT] <-> eth0, [local]<->[wlan0]).

Thanks for your help

Markus

_______________________________________________
LARTC mailing list
[email protected]
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
no comments
  Re: [LARTC] Split access, load balancing AND forwarding: HOW?         


Author: Ming-Ching Tiew
Date: Feb 23, 2007 15:59

From: "Alex Samad" samad.com.au>
> hi
>
> sorry missed the previous bits of the thread, could you post the relevant info,
> interested to see how this works and why you would pick it over the multipath
> method

Please note my checking of marked traffic is not ( according to the earlier posts )
> iptables -t mangle .... -m mark --mark ! 0 -j ACCEPT

However, it is :-
> iptables -t mangle .... -m mark ! --mark 0 -j ACCEPT

I leave it to you guys to decide which is the correct syntax.

The code below is taken from part of my bigger code :-

Cheers.
---------------------code-------------------------------------------
Show full article (2.66Kb)
no comments
  [LARTC] Conntrack table full and Heavy p2p loaded traffic manager ...         


Author: Sébastien CRAMATTE
Date: Feb 23, 2007 11:28

Hello

I've setuped a bridge with l7-filter and ipp2p. We have every day + or
- between 10Mbits and 30 Mbits P2P traffic from + or - 450 customers.
When traffic increase. I've got this kind of error message :

Feb 23 14:26:19 gestor1 kernel: printk: 38 messages suppressed.
Feb 23 14:26:19 gestor1 kernel: ip_conntrack: table full, dropping packet.

The server is celeron pentium 4 based 3Ghz + 512Mb ram
Does anyone could suggest me what are the best value for

net.ipv4.netfilter.ip_conntrack_max
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established

Might be I can tune other kernel value ?
Thanks for your help

Regards
Show full article (1.31Kb)
2 Comments
  Re: [LARTC] Split access, load balancing AND forwarding: HOW?         


Author: Alex Samad
Date: Feb 23, 2007 10:40

On Fri, Feb 23, 2007 at 03:23:42PM +0800, Ming-Ching Tiew wrote:
> From: "Luciano Ruete" lugmen.org.ar>
>>
>> This solution works in theory and in practice, so plz, get your hands dirty
>> before you post your next great idea.
>>
>
> I understand your explanation fully but believe me I also have got
> hand-on experience with using the alternative, ie
>
> 1. I don't use multipath weight routing.
> 2. I use PREROUTING all the way, ie I don't use POSTROUTING.
>
> Instead, I use iptables 'recent' and 'statistics'/'random' match to achieve
> load sharing.

hi

sorry missed the previous bits of the thread, could you post the relevant info,
interested to see how this works and why you would pick it over the multipath
method
Show full article (1.30Kb)
no comments
  Re: [LARTC] Ethernet bridge overflow ?         


Author: Sébastien CRAMATTE
Date: Feb 23, 2007 10:30

I've just check my kernel compilation and NAPI is enabled for twice nics...
Normally load should appear on "top" or "uptime" command ?

_______________________________________________
LARTC mailing list
[email protected]
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
no comments
  [LARTC] ttshaper 1.0 released!         


Author: olexat
Date: Feb 23, 2007 08:10

Hello there,

Traffic shaping tool

ttshaper 1.0

released!

For more info, visit http://exef.xko.cz/others/others.htm

Regards,
Tom

ExEf - the Ultimate Effect Processor - GNU Linux
*** http://exef.xko.cz ***
_______________________________________________
LARTC mailing list
[email protected]
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
no comments
  [LARTC] Ethernet bridge overflow ?         


Author: Sébastien CRAMATTE
Date: Feb 23, 2007 08:04

Hello,

I've setuped an ethernet bridge on a debian sarge 3.1 with l7-filter +
ipp2 shapper rules
The server is a supermicro p4sci + celeron pentium 4 base 3ghz + 512Mb
+ 2 ethernet e1000

One interface is connected to a cisco catalyst switch
The other interface is connected directly to a CMTS (a sort of router
for cable modem) configured as bridge too.

More than 20Mbps of bandwith cross this bridge. Most of this traffic is
p2p (~80%%)
When traffic goes over 14Mbps the bridge seems to saturate (overflow ?
) and start to make colision and loose packets

I've take a look to this paper
http://facweb.cti.depaul.edu/jyu/Publications/Yu-Linux-TSM2004.pdf

And with a duron 1,3Ghz+512 mbps he obtain these values
Show full article (1.33Kb)
1 Comment
  Re: [LARTC] Split access, load balancing AND forwarding: HOW?         


Author: Luciano Ruete
Date: Feb 22, 2007 18:54

On Wednesday 21 February 2007 23:58, Ming-Ching Tiew wrote:
> From: "Luciano Ruete" lugmen.org.ar>
>
>> The solution is to use CONNTRACK from iptables, full example described in
>> this[1] e-mail from the archive. No patches needed.
>>
>> [1] http://mailman.ds9a.nl/pipermail/lartc/2006q2/018964.html
>
> I think you mean CONNMARK ( not CONNTRACK ) from iptables ?

sory a brain-o, but in the email refered is well explained.
Show full article (3.27Kb)
no comments
  Re: [LARTC] Re: what's wrong?         


Author: francesco messineo
Date: Feb 22, 2007 08:02

Hello again
Show full article (0.92Kb)
no comments
1 2 3 4 5 6 7 8 9