RE: [leaf-user] QOS setup under Bering 1.2

2003-12-16 Thread Joey Officer
Been doing some reading, and I found a couple of interesting bits. What appears to be a somewhat current HTB home page, with a fair amount of documentation: http://luxik.cdi.cz/~devik/qos/htb/htbfaq.htm Additionally, from the FAQ: RTNETLINK answers: Invalid argument and tc parameters are

RE: [leaf-user] QOS setup under Bering 1.2

2003-12-16 Thread Erich Titl
Joey I am using tc only (not qos-htb) with the wondershaper as documented on the shorewall site. To start with, it failed too with IIRC similar problems. I finally had to dig into the wondershaper code and found ash arithmetic problems settting up the tc commands. So I believe it is not tc

Re: [leaf-user] CABLE + WIFI + IPSEC + WINDOWS + BERING = ???

2003-12-16 Thread Julian Church
Hi Sean On Mon, 15 Dec 2003 15:18:55 -0500, Sean E. Covel [EMAIL PROTECTED] wrote: Since this needs to be up-and-running quickly, and I'm doing it in my spare time, I wanted to go the path of least resistance. How soon till you implement? I was hoping to do it sometime over the Christmas

Re: [leaf-user] Weblet access

2003-12-16 Thread Julian Church
On Mon, 15 Dec 2003 21:07:18 -0500, Kory Krofft [EMAIL PROTECTED] wrote: The weblet config file has a setting for which networks can access it. I tried setting it to 0.0.0.0 but that did not help. What can I do to allow external requests to be answered by the weblet? I think weblet (sh-httpd) is

[leaf-user] USB keyboard

2003-12-16 Thread Johannes Walch
Hi all, has anybody successfully used a USB keyboard with LEAF Bering ? As far as I have understood it the input.o and keybdev.o modules are missing in the modules package. I am just trying to build a Bering kernel myself along with these modules, but I would happily use some pre-compiled stuff

RE: [leaf-user] QOS setup under Bering 1.2

2003-12-16 Thread Joey Officer
Erich Thanks for the input. I had read a thread or two discussing Wondershaper, although admittedly, I haven't looked at it yet. I think that if this continues to fail, I may dive into that project instead. You mentioned that you made some arthmetic changes to the wondershaper code, I am

RE: [leaf-user] QOS setup under Bering 1.2

2003-12-16 Thread Mariano Drzazga
Joey : I'm using HTB with Bering 2.0 without problems. I don't use wondershaper neither htb.init scripts since I use my own made scripts with tc tool. Reading in your first mail, you've wrote : # tc qdisc add dev eth0 root but I think the correct sentece should be : # tc qdisc add dev eth0

[leaf-user] Why run Squid in the DMZ?

2003-12-16 Thread Craig Caughlin
Hi folks, I see in Tom's documentation for Shorewall that he runs Squid transparently on a box in his DMZ rather than on his LAN, and I'm just curious why? Thank you, Happy Holidays! Craig --- This SF.net email is sponsored by: IBM Linux

Re: [leaf-user] Why run Squid in the DMZ?

2003-12-16 Thread Ryan M. Waters
To my knowledge, it shouldn't matter whether Squid, run as a proxy server, is placed on the LAN side or the DMZ side (or NET side, for that matter). If the box was run as an accelerator / reverse proxy, you'd want to have it sit in the DMZ, presumably to protect the internal network from a

Re: [leaf-user] Why run Squid in the DMZ?

2003-12-16 Thread Ryan M. Waters
Sorry for the double reply, but by putting the box in the DMZ, you could avoid some unnecessary NAT. Just a thought. Ryan Craig Caughlin wrote: Hi folks, I see in Tom's documentation for Shorewall that he runs Squid transparently on a box in his DMZ rather than on his LAN, and I'm just

Re: [leaf-user] Why run Squid in the DMZ?

2003-12-16 Thread Charles Steinkuehler
Craig Caughlin wrote: Hi folks, I see in Tom's documentation for Shorewall that he runs Squid transparently on a box in his DMZ rather than on his LAN, and I'm just curious why? Without trying to speak for Tom, at least one to run Squid in a DMZ (or some other network besides the main internal

Re: [leaf-user] Why run Squid in the DMZ?

2003-12-16 Thread Tom Eastep
On Tuesday 16 December 2003 01:09 pm, Charles Steinkuehler wrote: If the squid box was on the internal net, it would not be truely transparent to the clients, who could easily tell their requests were being proxied and answered by a local system. There would also be some amount of

RE: [leaf-user] Save Zebra config fails

2003-12-16 Thread Eric B Kiser
Wim, Glad to be of service. Please let us know if you run into any other snags. Eric Kiser -Original Message- From: Wim Acke [mailto:[EMAIL PROTECTED] Sent: Tuesday, December 16, 2003 3:37 PM To: Eric B Kiser; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [leaf-user] Save Zebra

RE: [leaf-user] CABLE + WIFI + IPSEC + WINDOWS + BERING = ???

2003-12-16 Thread aggray
I have done something similar but not using a DMZ. I simply added a second Private network for the WiFi network using a normal NIC and a Separate Wireless Access Point. Simply don't add any rules that will allow the two networks to interact into your shorewall rules and you have 2 independent,

Re: [leaf-user] Weblet access

2003-12-16 Thread Kory Krofft
Julian, Thank you so much. I knew I was overlooking something simple. It works great now. Thanks again, Kory On Tue, 16 Dec 2003 11:21:55 +, Julian Church wrote: On Mon, 15 Dec 2003 21:07:18 -0500, Kory Krofft [EMAIL PROTECTED] wrote: The weblet config file has a setting for which

RE: [leaf-user] QOS setup under Bering 1.2

2003-12-16 Thread Joey Officer
Thanks for the correction, but based on the documentation for the QoS under Bering, I should be able to type the initial command, and get some response. Instead I only get the error. I have defined the modules, as noted here: firewall: -root- # lsmod Module PagesUsed by sch_tbf