ables: 1.2.6a
http://sourceforge.net/project/showfiles.php?group_id=38685
any q's/comments, feel free to flame/email me :)
coreteam: if u find this usefull, u can include a link on your
site like previously discussed
--
Nigel Kukard
TEST FAILED: patch NOT applied.
[Press enter to continue]
thats a vanilla kernel, what am i doing wrong? :(
--
Nigel Kukard (General Manager)
Lando Technologies Africa (Pty) Ltd
[EMAIL PROTECTED] www.lando.co.za
Tel: 083 399 5822 Fax: 086 1100036
Hoheisen Park Bellville, Cape T
hrmmm, ok after trying out "tc" for the last week i've noticed it is
not even nearly as powerfull as netfilter.
is still have the same problem with dropping packets as i did before,
it seems to break some connections (i'm not dropping SYN packets, or
any ones which are in state NEW), only those
On Tue, 2 Apr 2002, Maciej Soltysiak wrote:
> > is dropping packets the proper way to slow down traffic on a network?
> No. If you drop packets randomly you will break existing connetions.
> If you drop incomming SYN packets, it is okay, but one connection can eat
> up lots of bandwith anyway.
y
is dropping packets the proper way to slow down traffic on a network?
(using the bytelimit match). i have somone who is complaining that
as soon as he tries to transfer mass amounts of data with scp, the
connection is dropped. he is using freebsd, could this be the problem?
Regards
-Nigel
the entire firewall, and reload certain rules aswell.
i would just like to know if it would be better to push the entire 20k
rule firewall in at the same time with 1 iptables-restore command?
Regards
Nigel Kukard (General Manager)
dering what
> the second argument (ipt_entry) means and how to give it a correct
> value.
>
> is there any easier way to do this? (i want to create about 10,000
> rules... don't ask why, and yes the server is powerfull enough) :)
>
>
> Regards
>
>
--
Nigel
argument (ipt_entry) means and how to give it a correct
value.
is there any easier way to do this? (i want to create about 10,000
rules... don't ask why, and yes the server is powerfull enough) :)
Regards
--
Nigel Kukard (Systems Designer)
Lando Technologies Africa (Pty) Ltd
[EMAIL PROTECTE
