Linux Networking refers to any networking function performed by a server running Linux. A Linux server operating as a router or firewall are the most common applications.

learn more… | top users | synonyms

3
votes
0answers
482 views

Limiting bandwidth with hashlimit (e.g. kb/s — not connections!) doesn't work, though the man page says it should

According to the iptables-extensions man page hashlimit can do bandwidth limiting: "flows exceeding 512kbyte/s" => --hashlimit-mode srcip,dstip,srcport,dstport --hashlimit-above 512kb/s ...
2
votes
0answers
50 views

How to route traffic through different interfaces based on the port number?

iptables -A PREROUTING -i usb0 -t mangle -p tcp --dport 8080 -j MARK --set-mark 1 iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination Chain ...
2
votes
0answers
30 views

IPsec - strange behavior

I have set up site-to-site ipsec connection between linux(debian) and mikrotik router. The tunnel is up linux configuration: config setup interfaces=%defaultroute keep_alive=60 ...
2
votes
0answers
27 views

PIV authentication on redhat

I'm looking for a solution, or set of technologies, (etc) - for setting up a mixed (win 7, rhel 6.5) network with centralized login using smart cards (PIV). I know that this is possible using a ...
2
votes
0answers
2k views

eth0 NIC Link is Down repeating message in kernel log

I've noticed since few days ago that same repeating kind of messages occurs and I positively can say that nothing was intentionally changed (installed/uninstalled) in that period. here's sample of ...
2
votes
0answers
441 views

VMware - Broadcom 1000Gbps NIC does not link at 100Mbps to a Cisco switch port

Today we've stumbled on a very awkward situation with our VMWare Server. The server is with ESX 3.5 that has a 1Gbps NIC. We bought a brand new managed Cisco Linksys switch with 10/100Mbps interface ...
1
vote
0answers
42 views

linux not replying to an arp request

I am running linux 3.14 on a system with 2 interfaces. on the first interface, i can access our local network. on the second interface, arp packets come in but linux doesn't send out reply. is it ...
1
vote
0answers
39 views

Route traffic for a specific IP through a specific interface

I'm setting up a server that tunnels all its traffic over an OpenVPN connection. The VPN connection is further tunnelled over obfsproxy hosted on the same machine. The problem is that as soon as the ...
1
vote
0answers
14 views

Configuring openldap/PHP LDAP against “signed” LDAP connections with Active Directory

This may sound like a stupid question, and maybe it's already been answered, but I can't find a definitive answer anywhere, so I thought I'd ask. When someone enables "Domain controller: LDAP server ...
1
vote
0answers
46 views

Separate L2TP/IPsec VPNs with dynamic VLAN assignment

I am working on a Linux (Debian 7) VPN concentrator for different kinds of remote access. One of the offered protocols is L2TP/IPsec because of the client availability. I am using xl2tpd which in turn ...
1
vote
0answers
39 views

Redirect Default Gateway Traffic in Linux to File

I am trying to troubleshoot one of my linux servers (ubuntu server). Therefore I want to intercept all traffic that is sent to the default gateway and then write it to a file: preferably some kind of ...
1
vote
0answers
61 views

Enabled Intel® I/O Acceleration but no bytes transffered

I enabled IOAT but it seems that no data is transferred using DMA for network: I enabled IOAT in bios. CPU is Intel(R) Xeon(R) CPU E5-2650 v2 @ 2.60GHz. I loaded the module in ubuntu 14.04 ...
1
vote
0answers
77 views

Load Balancing over multiple ISP connections

I have been trying to implement load balance and fail over on a linux machine having multiple interfaces. Currently I am using two ISP lines and I wish to split the network traffic such that both of ...
1
vote
0answers
48 views

Printer on OS X not printing across VPN subnets

I have an interesting situation where I have a two servers that connect two subnets via a VPN. One side is 192.168.0.0/24 and the other is 192.168.1.0/24. Communications appear to be working okay. I ...
1
vote
0answers
85 views

Using my IPs on OVH server via GRE

I can't route my IPs into a OVH server, can you help me to find the problem? Mikrotik GRE IP: 192.168.55.10 OVH Server GRE IP: 192.168.55.20 GRE iface name: ali1_fr1-ovz1 IP to route from Mikrotik to ...
1
vote
0answers
55 views

Policy routing local user's traffic down a tunnel

I've got a Linux based Firewall/Router running iptables and SNAT for traffic passing through it to the Internet via a single uplink - This is working fine. There is also a small number of applications ...
1
vote
0answers
32 views

Chef - handle resources changing the network interface

I'm using chef to deploy an openvpn application in bridging mode to an ubuntu node. In my recipe i'm using a bash resource to create the bridge necessary for the vpn to work. Unfortunately the bridge ...
1
vote
0answers
28 views

IPSEC on linux with multiple remote ISP

I have configured 2 ipsec VPN connection from my linux server to my clients locations. the reason being the client has two ISPs a primary and a secondary on. The client wants to switch to secondary ...
1
vote
0answers
25 views

Losing connection to server from several computers

I have a PostgreSQL server running Oracle Linux. In my network I have several workstations each running different OS (Fedora, Ubuntu, Windows). Every once in a while I lose connection from the several ...
1
vote
0answers
205 views

php-fpm process in D state ,cause nfs wait rpc_wait_bit_killable

my wordpress site which is in clustered environment using NFS,nginx,php-fpm,mysql the infrastructure is hosted on amazon ec2.Under high load/traffic the php5-fpm process goes in D ...
1
vote
0answers
256 views

Shorewall redirect rule only working for some hosts in the same network

I'm trying to use Shorewall's REDIRECT action to intercept traffic destined for the firewall's port 514 (TCP and UDP) to port 5000 (also TCP and UDP), while also allowing direct traffic to the latter ...
1
vote
0answers
78 views

Can I route traffic destined for a local interface out another interface?

I'm trying to set up a testbench for a transparent device (called TD from now on). The goal is to make sure it forwards and logs correctly. I need to use just 1 machine + the TD in the test bench. ...
1
vote
0answers
142 views

Massively large number of packets dropped by interface

I have a virtual machine on ESXi 5 acting as a firewall for a PBX, it is running vyatta. When I run tcpdump on any interface, I get some ridiculous numbers! e.g. 4 packets captured 402 packets ...
1
vote
0answers
565 views

Multicast route setup for multiple interface

Currently I have the below eth5 to receive multicast data for 239.1.1.31. It works. $ ifconfig eth5 Link encap:Ethernet HWaddr E4:11:5B:94:E1:F3 inet addr:10.185.2.2 ...
1
vote
0answers
254 views

iptables - hashlimits, why it calculate all to seconds

I've tried to set 'synflood' limits with hashlimits, those are my snippet of rules: iptables -A SYNFLOOD_CHECK -p tcp --syn -m hashlimit --hashlimit-above 10/s --hashlimit-burst 6 \ ...
1
vote
0answers
219 views

Proxmox internal network configuration

We have several servers (with one nic) staying in one rack in hetzner. Proxmox is installed on each one, and they are combined in proxmox cluster. The goal is to create network, between virtual ...
1
vote
0answers
37 views

Improbably high bitrate in the output of “iw wlan0 link”

I am trying to determine the bitrate of a wireless connection that uses the nl80211 driver on a Linux 2.6.39 machine. I am actually using a Netlink socket internally, but the effect is the same as ...
1
vote
0answers
105 views

Port corruption using iptables NAT on Enterprise Linux 6

I am trying to setup a captive web portal redirect on CentOS using the following configuration: This configuration works for the first few packets, but then suddenly the destination port is corrupted ...
1
vote
0answers
355 views

access tap interface in network namespace across machines

I want to be able to access services running on a TAP interface within a namespace from outside the machine where it is running. I have setup that looks like this - VM1/Machine1 +eth0 : Public ...
1
vote
0answers
106 views

Linux as gateway with VLANs failing for local network

We have a private VLAN being routed out from a host connected both to it and to our public network. Hosts on the private VLAN have the private IP address of the gateway host (10.2.2.82) set as their ...
1
vote
0answers
53 views

what is PAT exactly?

In attempt to understand PAT, I've setup the following setup where I have a Linux Router that masquerades from in internal interface to the external. Thus both clients are able to talk to outside ...
1
vote
0answers
91 views

Connect two servers with OpenVPN

guys, I need a consulting. I need to connect two servers which are located at another places geographically. One of servers is at LeaseWeb, and another is at our office in Moscow. I'm using OpenVPN ...
1
vote
0answers
366 views

Using ebtables to drop packets out of bridge and route via Tinc VPN

We have a bridge set up on Ubuntu to link our LAN to our gateway which is on the same subnet. We need this to be able to control the traffic and are not currently in a position to change subnets so we ...
1
vote
0answers
161 views

Receive errors counter in /proc/pid/net/dev

Can anyone explain what gets reported in /proc/pid/net/dev in the receive "errs" column: $ cat /proc/1372/net/dev Inter-| Receive | Transmit face ...
1
vote
0answers
258 views

How to use wvdial instead of network-manager in Debian

I would like to get rid of network-manager as it seems to be too magic for me. However for the life of me I cannot figure out how to connect my UMTS-stick using wvdial (network-manager has no ...
1
vote
0answers
95 views

How can I set ntop not to shorten host names?

With most screens in ntop, there is a list of hosts. Unfortunately, in almost every one, the host name is shorted, for some reason. When the host names follow the company standard, this results in the ...
1
vote
0answers
125 views

Broadcast across a VDE switch

I created a simple VDE Switch as per: http://stackoverflow.com/questions/2082722/how-do-i-create-virtual-ethernet-devices-in-linux To paraphrase that question, the setup is: sudo vde_switch -tap ...
1
vote
0answers
145 views

Peer to peer ipsec tunnel - virtual network interface

I'm trying to create an IPSEC tunnel between two machines (not between two networks). Using ipsec-tools, TUNNEL mode. I think I can cope with all those add and spdadd, but how to create a virtual ...
1
vote
0answers
458 views

VirtualBox - multiple guests, each with a single bridged adapter?

I am running a dedicated server (located at Hetzner, Germany) that runs VirtualBox in order to virtualize several services accross multiple virtual guests. Those guests are supposed to communicate ...
1
vote
0answers
118 views

What is the meaning of the QUEUE in arptables

I use the nfqueue target of iptables in order to get packet to the nfqueue and do some business rules on them. iptables -A INPUT -p tcp -j NFQUEUE --queue-num 0 I need to do the same on arp reply ...
1
vote
0answers
814 views

Arp request is not resolved

On my machine, I have assigned ip addresses for two interfaces which are connected through a cable. They are connected with 10G ports. When i tried to ping the two addresses, ping was not working. ...
1
vote
0answers
216 views

linux netfilter h323 module

In my system There is a Polycom HDC7000 video conferencing device and a VVX1500 ip phone. Incoming connection: Src:Any - Dst:ExtIP1 - Srv:Any -> DNAT to-destination IntIP7000 Src:Any - Dst:ExtIP2 ...
1
vote
0answers
586 views

why ping6 fails if tcpdump shows ICMP6 request/reply traffic?

I'm having a very strange problem with IPv6 pings on OpenWRT (fon-ng firmware with IPv6 enabled) and hoping someone can help with investigation. In short - wpan0 interface with address aaaa::1/64 is ...
1
vote
0answers
193 views

Attempting to DNS resolve / relay an IPv6 address for a host

I have a network switch doing IPv6 DNS relay to a Linux box (3.0.4-gentoo #7). The packets (DNS request) are arriving fine at the Linux box. Where I'm stuck now is how to resolve those, either by ...
1
vote
0answers
184 views

Connect to Orange interface in IPCop

I am using IPCop with a red-green-orange configuration. I am trying to access my webserver on the orange interface, from a computer on the green interface, both of which are inside my firewall. When ...
1
vote
0answers
216 views

tcng & tc hiercharchy

Let me explain what I'm trying to do, we have one 10Mbps line coming in, we want to divide that up into 3 3Mbps sections, which are defined by each subnet, then in one of these subnets we have ...
1
vote
0answers
588 views

Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME

I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article: http://weblog.bignerdranch.com/?p=6 But with no luck. I ...
1
vote
0answers
272 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
0answers
692 views

I am not able to ping the IPv6 address asigned to the interface on CentOS 5

I have assigned a stativ IPv6 address to eth2 interface and I am not able to ping it. Here is the configuration setup done in /etc/sysconfig/networking/device/ifcfg-eh2 # Intel Corporation 82546EB ...
1
vote
0answers
883 views

StrongSwan - Windows 7 0 IPSec IKEv2 connection problems

I am trying to configure a roadwarrior scenario between a linux box with StrongSwan and a Windows Box with Agile VPN. I successfully configured my StrongSwan and my Windows box to connect. The Windows ...