Reputation
Top tag
Next privilege 75 Rep.
Set bounties
Badges
1 11
Impact
~6k people reached

  • 0 posts edited
  • 0 helpful flags
  • 34 votes cast
May
27
awarded  Notable Question
May
22
comment How to block tcp-reset with iptables to combat DDoS attacks?
@Ladadadada, you should double the RST value in the --tcp-flags parameter, since it takes 2 values. It should look like this: -A OUTPUT -p tcp --tcp-flags RST RST -j DROP. It takes all packet with a RST field set (there could be more) and selects those with a RST field set. It might look redundant, but it's the way it was implemented.
Oct
20
awarded  Popular Question
Jul
31
comment force dhcp server to always run
All right, thank you SvW. Now I know. Your remark is what I was looking for.
Jul
31
asked force dhcp server to always run
Jul
30
awarded  Curious
Jul
29
revised simple setting for traffic shaping
deleted 4 characters in body
Jul
29
comment simple setting for traffic shaping
The aim of my experiment is to manually select one or more traffic flows (defined by their (src addr, dst addr, src port, dst port, protocol) and insert them in a leaky bucket.
Jul
29
comment simple setting for traffic shaping
Thank you for your input. I wanted to keep my post as short as possible, but I skipped an important detail: I do not shape traffic directly on A because I actually inject traffic on A at the mac layer (with tcpreplay). With dummynet and linux traffic control working at the IP layer, I would bypass them.
Jul
29
revised simple setting for traffic shaping
added 95 characters in body
Jul
29
revised simple setting for traffic shaping
added 9 characters in body
Jul
29
comment simple setting for traffic shaping
As for your last point, I believe I need an extra network interface on B in order to turn it into a router/gateway. Do you think a USB Ethernet adapter could do the job?
Jul
29
comment simple setting for traffic shaping
Thank you so much for your tips! I forgot to specify that the gateway is the only component over which I have no control. The switch in question is netgear prosafe 8 port 10/100 switch fs108 v2; I looked at its specs and it doesn't look like it runs Linux, unfortunately. Could you please elaborate more on point 3 or provide a simple example? It is true that A will heavily depend on B, but this is just for testing purposes and my personal use, so I guess it's ok.
Jul
29
revised simple setting for traffic shaping
added 101 characters in body
Jul
29
revised simple setting for traffic shaping
added 67 characters in body
Jul
29
asked simple setting for traffic shaping
Jun
5
comment Fedora, ssh and sudo
Unfortunately those logs are empty and I cannot seem to be able to find where sshd is (I might not even have access to it)... I think I can give up here :) Thanks you for your time, Jenny D. :)
Jun
4
revised Fedora, ssh and sudo
added /var/log/sudo
Jun
3
comment Fedora, ssh and sudo
I just added the output of stat /dev/tty*, hoping it's what you were asking for :)
Jun
3
revised Fedora, ssh and sudo
added 511 characters in body