Re: [bwm-tools-tech] Failed to ACCEPT packet
Brought to you by:
nkukard
From: Nigel K. <nk...@lb...> - 2005-05-12 09:02:18
|
Could you give us the following information plz... 1. Version of BWM Tools you're using 2. Your kernel version 3. iptables version 4. distribution & version 5. Pasted error from BWM Tools Regards Nigel Victor Yeo wrote: > i followed the example as in BWM documentation. I got a "Failed to > ACCEPT packet" error from bwmd, > when i run bwmd and ftp connection at the same time. Why? > victor > > ==================quote====================================================== > Imagine you would like your linux router to rate limit all traffic > from and to IP 192.168.1.100, an example of this can be found below... > > Configuring iptables > > > iptables -t filter -A FORWARD -m mark ! --mark 0x0 -j QUEUE > iptables -t mangle -A FORWARD -s 192.168.1.100 -j MARK > --set-mark 100 > iptables -t mangle -A FORWARD -d 192.168.1.100 -j MARK > --set-mark 101 > > Configuring bwmd > > > <firewall> > <global> > <modules> > <load name="ip_queue"/> > </modules> > </global> > > # Traffic flows > <traffic> > <flow name="pc_in" max-rate="64000" > report-timeout="60" > nfmark="100" /> > <flow name="pc_out" max-rate="64000" > report-timeout="60" > nfmark="101" /> > </traffic> > </firewall> > ==================end > quote====================================================== > -- Nigel Kukard, PhD CompSc (Chief Executive Officer) Linux Based Systems Design Web: www.lbsd.net Email: nk...@lb... Tel: (+27) 023 349 8000 Cell: (+27) 082 333 3723 Fax: (+27) 023 349 1395 Support: 086 747 7600 Address: LIGT House, 2 Klipdrift Rd, Rawsonville Linux Systems Design & Technology Solutions The best language to use is the language that was designed for what you want to use it for. ===================================================================== Disclaimer ---------- The contents of this message and any attachments are intended solely for the addressee's use and may be legally privileged and/or confidential information. This message may not be retained, distributed, copied or used if you are not he addressee of this message. If this message was sent to you in error, please notify the sender immediately by reply e-mail and then destroy the message and any copies thereof. Opinions, conclusions and other information in this message may be personal to the sender and is not that of Linux Based Systems Design, LinuxRulz or any of it's subsideries, associated companies or principals and is therefore not endorsed by Linux Based Systems Design or LinuxRulz. Due to e-maill communication being insecure, Linux Based Systems Design and LinuxRulz do not guarantee confidentiality, security, accuracy or performance of the e-mail. Any liability for viruses is excluded to the fullest extent. |