Linux Networking refers to any networking function performed by a server running Linux. A Linux server operating as a router or firewall are the most common applications.

learn more… | top users | synonyms

3
votes
0answers
390 views

Limiting bandwidth with hashlimit (e.g. kb/s — not connections!) doesn't work, though the man page says it should

According to the iptables-extensions man page hashlimit can do bandwidth limiting: "flows exceeding 512kbyte/s" => --hashlimit-mode srcip,dstip,srcport,dstport --hashlimit-above 512kb/s ...
2
votes
0answers
22 views

PIV authentication on redhat

I'm looking for a solution, or set of technologies, (etc) - for setting up a mixed (win 7, rhel 6.5) network with centralized login using smart cards (PIV). I know that this is possible using a ...
2
votes
0answers
789 views

eth0 NIC Link is Down repeating message in kernel log

I've noticed since few days ago that same repeating kind of messages occurs and I positively can say that nothing was intentionally changed (installed/uninstalled) in that period. here's sample of ...
2
votes
0answers
409 views

VMware - Broadcom 1000Gbps NIC does not link at 100Mbps to a Cisco switch port

Today we've stumbled on a very awkward situation with our VMWare Server. The server is with ESX 3.5 that has a 1Gbps NIC. We bought a brand new managed Cisco Linksys switch with 10/100Mbps interface ...
1
vote
0answers
37 views

Linux peer-to-peer ethernet bonding

I have two linux servers. Each have 2 ethernet ports. I connect port-to-port with straight-through ethernet cables between the 2 servers (there is no network switches involved). I want to bond the 2 ...
1
vote
0answers
24 views

Policy routing local user's traffic down a tunnel

I've got a Linux based Firewall/Router running iptables and SNAT for traffic passing through it to the Internet via a single uplink - This is working fine. There is also a small number of applications ...
1
vote
0answers
17 views

Chef - handle resources changing the network interface

I'm using chef to deploy an openvpn application in bridging mode to an ubuntu node. In my recipe i'm using a bash resource to create the bridge necessary for the vpn to work. Unfortunately the bridge ...
1
vote
0answers
20 views

IPSEC on linux with multiple remote ISP

I have configured 2 ipsec VPN connection from my linux server to my clients locations. the reason being the client has two ISPs a primary and a secondary on. The client wants to switch to secondary ...
1
vote
0answers
11 views

Windows network failing, not present on linux clients

got a really strange one for you all. I have a network setup using a linux machine as a gateway between various network segments (on seperate nic's) and virtual machines (one of which is a mail ...
1
vote
0answers
24 views

Losing connection to server from several computers

I have a PostgreSQL server running Oracle Linux. In my network I have several workstations each running different OS (Fedora, Ubuntu, Windows). Every once in a while I lose connection from the several ...
1
vote
0answers
101 views

Shorewall redirect rule only working for some hosts in the same network

I'm trying to use Shorewall's REDIRECT action to intercept traffic destined for the firewall's port 514 (TCP and UDP) to port 5000 (also TCP and UDP), while also allowing direct traffic to the latter ...
1
vote
0answers
58 views

Can I route traffic destined for a local interface out another interface?

I'm trying to set up a testbench for a transparent device (called TD from now on). The goal is to make sure it forwards and logs correctly. I need to use just 1 machine + the TD in the test bench. ...
1
vote
0answers
94 views

Massively large number of packets dropped by interface

I have a virtual machine on ESXi 5 acting as a firewall for a PBX, it is running vyatta. When I run tcpdump on any interface, I get some ridiculous numbers! e.g. 4 packets captured 402 packets ...
1
vote
0answers
239 views

Multicast route setup for multiple interface

Currently I have the below eth5 to receive multicast data for 239.1.1.31. It works. $ ifconfig eth5 Link encap:Ethernet HWaddr E4:11:5B:94:E1:F3 inet addr:10.185.2.2 ...
1
vote
0answers
161 views

iptables - hashlimits, why it calculate all to seconds

I've tried to set 'synflood' limits with hashlimits, those are my snippet of rules: iptables -A SYNFLOOD_CHECK -p tcp --syn -m hashlimit --hashlimit-above 10/s --hashlimit-burst 6 \ ...
1
vote
0answers
146 views

Proxmox internal network configuration

We have several servers (with one nic) staying in one rack in hetzner. Proxmox is installed on each one, and they are combined in proxmox cluster. The goal is to create network, between virtual ...
1
vote
0answers
25 views

Improbably high bitrate in the output of “iw wlan0 link”

I am trying to determine the bitrate of a wireless connection that uses the nl80211 driver on a Linux 2.6.39 machine. I am actually using a Netlink socket internally, but the effect is the same as ...
1
vote
0answers
84 views

Port corruption using iptables NAT on Enterprise Linux 6

I am trying to setup a captive web portal redirect on CentOS using the following configuration: This configuration works for the first few packets, but then suddenly the destination port is corrupted ...
1
vote
0answers
279 views

access tap interface in network namespace across machines

I want to be able to access services running on a TAP interface within a namespace from outside the machine where it is running. I have setup that looks like this - VM1/Machine1 +eth0 : Public ...
1
vote
0answers
81 views

Linux as gateway with VLANs failing for local network

We have a private VLAN being routed out from a host connected both to it and to our public network. Hosts on the private VLAN have the private IP address of the gateway host (10.2.2.82) set as their ...
1
vote
0answers
51 views

what is PAT exactly?

In attempt to understand PAT, I've setup the following setup where I have a Linux Router that masquerades from in internal interface to the external. Thus both clients are able to talk to outside ...
1
vote
0answers
84 views

Connect two servers with OpenVPN

guys, I need a consulting. I need to connect two servers which are located at another places geographically. One of servers is at LeaseWeb, and another is at our office in Moscow. I'm using OpenVPN ...
1
vote
0answers
294 views

Using ebtables to drop packets out of bridge and route via Tinc VPN

We have a bridge set up on Ubuntu to link our LAN to our gateway which is on the same subnet. We need this to be able to control the traffic and are not currently in a position to change subnets so we ...
1
vote
0answers
136 views

Receive errors counter in /proc/pid/net/dev

Can anyone explain what gets reported in /proc/pid/net/dev in the receive "errs" column: $ cat /proc/1372/net/dev Inter-| Receive | Transmit face ...
1
vote
0answers
218 views

How to use wvdial instead of network-manager in Debian

I would like to get rid of network-manager as it seems to be too magic for me. However for the life of me I cannot figure out how to connect my UMTS-stick using wvdial (network-manager has no ...
1
vote
0answers
78 views

How can I set ntop not to shorten host names?

With most screens in ntop, there is a list of hosts. Unfortunately, in almost every one, the host name is shorted, for some reason. When the host names follow the company standard, this results in the ...
1
vote
0answers
98 views

Broadcast across a VDE switch

I created a simple VDE Switch as per: http://stackoverflow.com/questions/2082722/how-do-i-create-virtual-ethernet-devices-in-linux To paraphrase that question, the setup is: sudo vde_switch -tap ...
1
vote
0answers
134 views

Peer to peer ipsec tunnel - virtual network interface

I'm trying to create an IPSEC tunnel between two machines (not between two networks). Using ipsec-tools, TUNNEL mode. I think I can cope with all those add and spdadd, but how to create a virtual ...
1
vote
0answers
411 views

VirtualBox - multiple guests, each with a single bridged adapter?

I am running a dedicated server (located at Hetzner, Germany) that runs VirtualBox in order to virtualize several services accross multiple virtual guests. Those guests are supposed to communicate ...
1
vote
0answers
107 views

What is the meaning of the QUEUE in arptables

I use the nfqueue target of iptables in order to get packet to the nfqueue and do some business rules on them. iptables -A INPUT -p tcp -j NFQUEUE --queue-num 0 I need to do the same on arp reply ...
1
vote
0answers
710 views

Arp request is not resolved

On my machine, I have assigned ip addresses for two interfaces which are connected through a cable. They are connected with 10G ports. When i tried to ping the two addresses, ping was not working. ...
1
vote
0answers
184 views

linux netfilter h323 module

In my system There is a Polycom HDC7000 video conferencing device and a VVX1500 ip phone. Incoming connection: Src:Any - Dst:ExtIP1 - Srv:Any -> DNAT to-destination IntIP7000 Src:Any - Dst:ExtIP2 ...
1
vote
0answers
509 views

why ping6 fails if tcpdump shows ICMP6 request/reply traffic?

I'm having a very strange problem with IPv6 pings on OpenWRT (fon-ng firmware with IPv6 enabled) and hoping someone can help with investigation. In short - wpan0 interface with address aaaa::1/64 is ...
1
vote
0answers
186 views

Attempting to DNS resolve / relay an IPv6 address for a host

I have a network switch doing IPv6 DNS relay to a Linux box (3.0.4-gentoo #7). The packets (DNS request) are arriving fine at the Linux box. Where I'm stuck now is how to resolve those, either by ...
1
vote
0answers
160 views

Connect to Orange interface in IPCop

I am using IPCop with a red-green-orange configuration. I am trying to access my webserver on the orange interface, from a computer on the green interface, both of which are inside my firewall. When ...
1
vote
0answers
207 views

tcng & tc hiercharchy

Let me explain what I'm trying to do, we have one 10Mbps line coming in, we want to divide that up into 3 3Mbps sections, which are defined by each subnet, then in one of these subnets we have ...
1
vote
0answers
508 views

Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME

I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article: http://weblog.bignerdranch.com/?p=6 But with no luck. I ...
1
vote
0answers
231 views

Configure OpenSCEP to grant certificate requests automatically

I am trying to setup an OpenSCEP server that can grant certificates automatically instead of me running scepgrant command every time there is a new request? Can someone let me know how to proceed with ...
1
vote
0answers
630 views

I am not able to ping the IPv6 address asigned to the interface on CentOS 5

I have assigned a stativ IPv6 address to eth2 interface and I am not able to ping it. Here is the configuration setup done in /etc/sysconfig/networking/device/ifcfg-eh2 # Intel Corporation 82546EB ...
1
vote
0answers
863 views

StrongSwan - Windows 7 0 IPSec IKEv2 connection problems

I am trying to configure a roadwarrior scenario between a linux box with StrongSwan and a Windows Box with Agile VPN. I successfully configured my StrongSwan and my Windows box to connect. The Windows ...
0
votes
0answers
14 views

Why is the TCP reply not received? (dual WAN failover router)

I have a problem with a dual WAN router setup which used to work but I suspect due to change of ownership by the DC provider some time ago which I wasn't made aware of and due to bad timing the ...
0
votes
0answers
19 views

HA router with keepalived showing unexpected traceroute

I have a couple of routers in HA using keepalived vrrp daemon under linux. Here are the addresses x.x.x.129 floating (keepalive) x.x.x.130 router1 (static) x.x.x.131 router2 (static) Something ...
0
votes
0answers
11 views

Local DHCP to setting up Nimbus cloud networking

I'm currently trying to install the Nimbus cloud in two machines (centOS 6) test environment inside the department/university network. The problem is that I can't install directly a DHCP server and ...
0
votes
0answers
20 views

Dual homed Linux host (Debian/Ubuntu) using DHCP

We have an Ubuntu server with 2 NICs. Each one is on a different subnet. Besides there's a third subnet. Clients sit on all three subnets. All clients should be able to talk to both server IPs so we ...
0
votes
0answers
14 views

Watchguard XTM 23 blocking company website

The company that I'm working at runs a website and 1 week ago the site started returning 404's whenever anyone tried to access it from our protected network. We immediately checked on the status with ...
0
votes
0answers
51 views

How can I switch from a custom linux network namespace back to the default one?

With ip netns exec you can execute a command in a custom network namespace - but is there also a way to execute a command in the default namespace? For example, after executing these two commands: ...
0
votes
0answers
24 views

What it takes for an openstack instance to connect to internet

I'm running a two node openstack cloud with single NIC using nova-network, Everything seems fine but when it comes to networking there are many problems and I think thats due to having only one NIC on ...
0
votes
0answers
12 views

Opening a port range using Open VSwitch

I am locking down a VM on xenserver to allow only port 3389 and the ports required for domain controller authentication on windows. I am trying to do this using Open VSwitch. Locking down and allowing ...
0
votes
0answers
25 views

SYN-ACK with identical MACs

What could cause a CentOS machine to respond with SYN-ACK packet having both source and destination MACs set to the address of the NIC from which the packet is being sent?
0
votes
0answers
25 views

Routing, OpenVPN and blocked Packets to Router

I have a running Zentyal Router. Now I have created a Softether-VPN (which wraps OpenVPN basically), to connect to this network per Network-Bridge/L2-Switch. So, when I connect per VPN I am in the ...