Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Harry Lachanas
One thing I've always hated was to search netfilter.org and find patches or whatever, True, but there is no way around :-( Kernel 2.6 has most of the modern goodies, but it is substantially larger than 2.4 and it will be very difficult to fit a working system on a single floppy.

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Kwon
Lets be honest who needs a floppy nowdays ( I think they are very difficult to find and very expensive ) I don't use a floppy to boot, but however I use a floppy to save my config files. My Leaf System: Asus P5S-VM MB, AMD-K6 400MHz, CD Rom (to boot), 128mb RAM, 3 D-Link NICs, floppy

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread J.L. Blom
On Wed, 2007-07-18 at 09:51 +0300, Harry Lachanas wrote: One thing I've always hated was to search netfilter.org and find patches or whatever, True, but there is no way around :-( Kernel 2.6 has most of the modern goodies, but it is substantially larger than 2.4 and it

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread giovanni
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 J.L. Blom wrote: ... Using a floppy is the only way old systems can be used as a firewall (except using a HD, which in my opinion is more vulnerable, or a CD, which is cumbersome when you want to change things). Joep I used many times a Compact

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread J.L. Blom
Giovanni, How do you do that? (short of making some hardware to connect an USB-stick or flashcard to an IDE interface). Joep On Wed, 2007-07-18 at 11:31 +0200, giovanni wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 J.L. Blom wrote: ... Using a floppy is the only way old systems

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Luis.F.Correia
Hi there -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J.L. Blom Sent: Wednesday, July 18, 2007 11:46 AM To: giovanni Cc: leaf-user@lists.sourceforge.net; Erich Titl; Harry Lachanas Subject: Re: [leaf-user] Extended MARK Target Question

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread giovanni
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 J.L. Blom wrote: Giovanni, How do you do that? (short of making some hardware to connect an USB-stick or flashcard to an IDE interface). Joep Usually I buy some very simple interfaces (Compact Flashes are designed to be phisically compatibles

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Erich Titl
Hi Folks J.L. Blom wrote: Giovanni, How do you do that? (short of making some hardware to connect an USB-stick or flashcard to an IDE interface). Joep I have a handful of DOM's we don't need anymore. Conditions: 1) The mail cost, e.g. dont't consider this outside Europe 2) A free beer

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Harry Lachanas
J.L. Blom wrote: Giovanni, How do you do that? (short of making some hardware to connect an USB-stick or flashcard to an IDE interface). Joep On Wed, 2007-07-18 at 11:31 +0200, giovanni wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 J.L. Blom wrote: ... Using a floppy

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread J.L. Blom
Everybody, Thanks for the advice. I found I have a supplier round the corner!. I will go out and get me one. Thanks for all the advice. Joep On Wed, 2007-07-18 at 13:05 +0200, giovanni wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 J.L. Blom wrote: Giovanni, How do you do that?

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Kwon
Lets be honest who needs a floppy nowdays ( I think they are very difficult to find and very expensive ) Brand new floppies from my supplier eprom.ca: FD-PAN-144 PAN 1.44 FD (BEIGE) Yes $8.00 each FD-PAN-144-BLACK PAN 1.44 FD (BLACK) Yes $8.00 each FD-TOS-144-USB-BLK TOSHIBA 1.44 USB EXT. FD

[leaf-user] Extended MARK Target Question.

2007-07-17 Thread Harry Lachanas
Hi all, I think this list is on vacation, I am running Bering-uClibc 3.1 beta 1 when I issue shorewall show capabilities I get: Extended Multi-port Match: Not available Connection Tracking Match: Not available Policy Match: Not available Ipset Match: Not available Raw Table: Not available

Re: [leaf-user] Extended MARK Target Question.

2007-07-17 Thread Tom Eastep
Harry Lachanas wrote: I got a bit confused with Extended MARK Target Is this capability available with 2.4.xx kernels ??? As I mentioned when you asked on the Shorewall list, I can't answer that one. If yes which module is required?? Extended mark support is not a separate

Re: [leaf-user] Extended MARK Target Question.

2007-07-17 Thread Harry Lachanas
iptables -t mangle -N foo iptables -t mangle -A foo -j MARK --and-mark 0xFF If you get an error such as: Thanks Tom, I've done this already and I got # iptables -t mangle -A foo -j MARK --and-mark 0xff iptables v1.3.5: MARK target: kernel too old for --and-mark Try

Re: [leaf-user] Extended MARK Target Question.

2007-07-17 Thread Erich Titl
Hi Harry Lachanas schrieb: iptables -t mangle -N foo iptables -t mangle -A foo -j MARK --and-mark 0xFF If you get an error such as: Thanks Tom, I've done this already and I got # iptables -t mangle -A foo -j MARK --and-mark 0xff iptables v1.3.5: MARK target: kernel