Re: [LARTC] shaping outbound ftp traffic on 1 nic not working properly

2004-10-08 Thread chris
Is the inbound rate affected even if there are no outbound transfers? Is the speed actually being limited to a certain speed, or are you just noticing that the inbound/upload traffic is slower than it should be. The reason I ask is because you're tagging all outbound ftp-data traffic (ports

[LARTC] Problem with VPN routing from internal network

2004-10-08 Thread Remus
Hi folks, I have the two firewalls (Slackware current) in differnt cities connected via OpenVPN. I can ping the network behind server firewall from client firewall server. But how to route/iptable network traffic from the network behind client firewall to see the netwrok behind server

Re: [LARTC] Problem with VPN routing from internal network

2004-10-08 Thread Peter Huetmannsberger
Hi! Correct me if I am wrong, what it looks like to me is this : 192.168.1.0/24 10.0.0.1 10.0.0.2 192.168.2.0/24 server net serverfw openvpn clientfw client net On the serverfw you need a static route to the client net: route add net 192.168.2.0

Re: [LARTC] PRIO not working?

2004-10-08 Thread Andy Furniss
Phill wrote: Hello, I am using a simple script, which is based on prio. The point is, that it is not possible to use htb on wifi networks, so I thought that prio will work fine, but it does almost nothing. All I wanted was to make the important packets like icmp, games, VoIP,... to go

Re: [LARTC] Problem with VPN routing from internal network + tun0 and traffic shaping

2004-10-08 Thread Remus
You are correct Peter. But that is not enough to have access from client local lan to serevr client local lan. The line below helpped me to fix it: iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -o tun0 -j SNAT --to-source 10.0.0.2 So there is one more problem, how to access from the server

Re: [LARTC] Problem with VPN routing from internal network + tun0 and traffic shaping

2004-10-08 Thread Peter Huetmannsberger
OK. I didn't know you wanted to NAT the traffic. If you have the default gw on your client-net set to the client-gw AND you forward the traffic, i.e. set your ip_forward to 1 AND you allow that in your iptables, there is no need to NAT the traffic at all. (If you have a static route set to

Re: [LARTC] HTB weird problem ....

2004-10-08 Thread Jason Boxman
On Friday 08 October 2004 10:58, Andy Furniss wrote: snip Also you may need to set Hz higher or use psched = CPU for timing. In 2.6.9 this looks like it'll be part of the `make config` process itself. :) -- Jason Boxman Perl Programmer / *NIX Systems Administrator Shimberg Center for

Re: [LARTC] Problem with VPN routing from internal network + tun0 and traffic shaping

2004-10-08 Thread Rimas
Hi Peter, I already tried to give the IP from the same network for my tunnel, but OpenVPN 2.0b11 just blocks after that access to firewall via internal IP. So I gave the different IP space. My setup is here Server: ifconfig The OpenVPN goes via this Wireless line eth0 Link encap:Ethernet

[LARTC] shaping outbound ftp traffic

2004-10-08 Thread nix4me
In theory yes, but it is shaping inbound transfers to my server. YOu're not doing any other sort of Ingress filters are you?? No I dont care about destination port. That line was commented. BUT, incoming transfers are being shaped for some reason. Could this be shaping on the ISP side??

[LARTC] shaping outbound ftp traffic

2004-10-08 Thread nix4me
Yes, inbound is affected even though outbound transfers are suspended. The inbound in shaped to 39K. This is what totally confuses me. I thought with my script that only traffic leaving source ports 5-51000 65437 should be shaped. But it is also shaping traffic entering my machine on

[LARTC] Delay packets by 50ms

2004-10-08 Thread Anshuman Kanwar
Hi all, I am trying to solve a tiny problem that is trivial to solve using dummynet (FreeBSD). I just want to add a delay of 50ms to each outgoing packet from an interface. This is to simulate a large pool of multiple modem users so I also need to add b/w limits etc (which seems to be easy to

Re: [LARTC] Delay packets by 50ms

2004-10-08 Thread Stephen Hemminger
On Fri, 2004-10-08 at 15:38 -0700, Anshuman Kanwar wrote: Hi all, I am trying to solve a tiny problem that is trivial to solve using dummynet (FreeBSD). I just want to add a delay of 50ms to each outgoing packet from an interface. This is to simulate a large pool of multiple modem users

[LARTC] Ceiling question

2004-10-08 Thread Peter Huetmannsberger
Hi! I have a setup where I want to prefer traffic on one port (for testing purposes I used port 22) my setup is : tc qdisc add dev eth3 root handle 1: htb default 30 tc class add dev eth3 parent 1: classid 1:1 htb rate 96mbit burst 15k tc class add dev eth3 parent 1: classid 1:7 htb rate

[LARTC] Excess Bandwidth

2004-10-08 Thread Ronaldo Z. Afonso
Hi, I'm trying to configure QoS on my linux in the following manner: I have a main link with 64K, so I divided it in 3 classes of 18K, 14K and 9K with an excess (not used for classified traffic, just to be shared) of 23K. This excess should be distributed proportonally among the 3

[LARTC] Sending and receiving

2004-10-08 Thread Alexis
Hi all. Here's the situation Linux box with eth0 connected to LAN, and eth1 connected to internet via cablemodem. Connected to the lan are some voip devices, ive configured htb in eth1 to save some bandwith for the voip devices. Now i have another issue, at some hours of the days, some servers

Re: [LARTC] Excess Bandwidth

2004-10-08 Thread Daniel Frederiksen
Hej Ronaldo Remember to prioritize the excess bandwidth. If you are using the HTB read the bottom section of the manual.: http://luxik.cdi.cz/~devik/qos/htb/manual/userg.htm#prio The prio parameter will help you with your problem, give the child classes a priority from 1-3, where 1 is the

RE: [LARTC] Delay packets by 50ms

2004-10-08 Thread Anshuman Kanwar
Hi Stephen, Getting the latest iproute2 solved my problem. Thanks! -Original Message- From: Stephen Hemminger [mailto:[EMAIL PROTECTED] Sent: Friday, October 08, 2004 3:55 PM To: Anshuman Kanwar Cc: [EMAIL PROTECTED] Subject: Re: [LARTC] Delay packets by 50ms On Fri, 2004-10-08 at

[LARTC] Does anyone have a working proxyARP setup?

2004-10-08 Thread gypsy
If you have a working proxyARP setup, will you please post it? I've tried to insert a Linux box between the DSL connection and the switch, but I'm getting nowhere. Everything works correctly when all the servers in this network use the switch to get to the DSL. Any box directly connected to the