Re: [Shorewall-users] Two Shorewall 3.2 Issues

2006-11-10 Thread Farkas Levente
why don't you release 3.2.6? Tom Eastep wrote: Updates are available at http://www.shorewall.net/pub/shorewall/3.2/shorewall-3.2.5/ 1) If a DNAT or REDIRECT rule was used where the effective policy between the source and final destination zones is ACCEPT, the ACCEPT part of the

[Shorewall-users] DNAT Question

2006-11-10 Thread kog
Hopefully this hasn't been asked a number of times.. I did some searching, and didn't come up with anything initially. I have a machine which is to act as a reverse proxy for ftp traffic. It sits in the dmz, and receives ftp traffic from the net. Its job is to pass along that traffic to the

Re: [Shorewall-users] QoS - Slow Downloads

2006-11-10 Thread Tom Eastep
Helder Gaspar Rodrigues wrote: As you can see 947KB... Can you help me? Sounds like you need to increase the IN-BANDWIDTH. In the output of shorewall show tc, you should see something like the following: qdisc ingress : Sent 49358559 bytes 65794 pkts (dropped

Re: [Shorewall-users] Two Shorewall 3.2 Issues

2006-11-10 Thread Tom Eastep
Farkas Levente wrote: why don't you release 3.2.6? Note that the second problem listed turned out to be a non-issue. It's not that 3.2.5 is unusually buggy; I've just started announcing known problems when they are discovered. -Tom -- Tom Eastep\ Nothing is foolproof to a sufficiently

Re: [Shorewall-users] DNAT Question

2006-11-10 Thread kog
That did the trick! Many, many thanks. FTP Doesn't work unless it's passive - but as I understand it the FTP macro should handle active ftp - so it's probable something to do with the firewall sandwich that the shorewall instance is in the middle of. Again, many thanks.. Bill On Fri, 10

Re: [Shorewall-users] DNAT Question

2006-11-10 Thread Tom Eastep
[EMAIL PROTECTED] wrote: That did the trick! Many, many thanks. FTP Doesn't work unless it's passive - but as I understand it the FTP macro should handle active ftp - so it's probable something to do with the firewall sandwich that the shorewall instance is in the middle of. Both passive

Re: [Shorewall-users] Ingress policing

2006-11-10 Thread Tom Eastep
Andrew Suffield wrote: On Fri, Nov 10, 2006 at 10:11:04AM -0800, Tom Eastep wrote: Helder Gaspar Rodrigues wrote: Yes that are packet being dropped: qdisc ingress : Sent 22676402 bytes 39464 pkt (dropped 244, overlimits 0 requeues 0) rate 0bit 0pps backlog 0b 0p

Re: [Shorewall-users] QoS - Slow Downloads

2006-11-10 Thread Tom Eastep
Helder Gaspar Rodrigues wrote: Im sorry about that. I will not repeat again. You just did! Well I incread step by step the IN-BANDWITH value. When I raise this value the number of dropped packets decreases. When I assign 15Mbit I only have 1 packet dropped. When I assign 20Mbit I dont

Re: [Shorewall-users] QoS - Slow Downloads

2006-11-10 Thread Tom Eastep
Tom Eastep wrote: Helder Gaspar Rodrigues wrote: Im sorry about that. I will not repeat again. You just did! Well I incread step by step the IN-BANDWITH value. When I raise this value the number of dropped packets decreases. When I assign 15Mbit I only have 1 packet dropped. When I

Re: [Shorewall-users] QoS - Slow Downloads

2006-11-10 Thread Simon Hobson
Helder Gaspar Rodrigues wrote: Im sorry about that. I will not repeat again. But does so in the very same message ! Well I incread step by step the IN-BANDWITH value. When I raise this value the number of dropped packets decreases. When I assign 15Mbit I only have 1 packet dropped. When I

Re: [Shorewall-users] QoS - Slow Downloads

2006-11-10 Thread Tom Eastep
Brian J. Murrell wrote: I have to preface by saying I have only a faint memory of the tc stuff in shorewall since it's useless to me on Mandriva since they decided to ship 2007.0 without the pp2p module. :-( But I wonder if this sort of thing, putting acks in the highest priority band