351 reputation
16
bio website cook.fangorn.ch/jean-louis
location Switzerland
age 35
visits member for 3 years, 9 months
seen Oct 5 '13 at 22:27

A programmer by profession, heavy stackoverflow user (mostly readonly). I try to answer network related questions, so I am more active on serverfault and unix.


Aug
21
awarded  Yearling
May
24
answered Bridging two Ethernet networks /w DHCP over WiFi
Apr
14
awarded  Commentator
Apr
14
comment How do I access my WAN IP internally according to my existing iptables port forwarding rules?
In my opinion it is not possible. But I would like to learn the opposite.
Apr
12
comment How can I reroute heavy traffic using iproute2
I am very sorry. I wanted to point out that you need a multihomed router when you asked the first question, but then I thought it is offtopic. As thor explained if you have a different address for each ISP connection there is nothing you can do. - But I still don't know your setup, so if I can explain from what machine to what machine the traffic flows and in what direction (outgoing/incoming) I might find of some way.
Apr
6
revised How can I reroute heavy traffic using iproute2
deleted 45 characters in body
Apr
6
comment How can I reroute heavy traffic using iproute2
If you aren't an ISP, I am quite sure your router isn't multihomed. If you haven't configured BGP, I am quite sure your router isn't multihomed. -> If you have a website where you provide downloads consider linking the downloads to another webserver that is connected to that other ISP.
Apr
6
answered How can I reroute heavy traffic using iproute2
Mar
21
comment How to identify download traffic using iptables
@Supratik You can try to compile the module by compiling the kernel exactly as it was originally built, but with connbytes enabled. This should give you a good starting point. I would recommend to install the resulting package, but only copying connbytes from the build directory should also work.
Mar
21
comment How to identify download traffic using iptables
@Supratik No newer kernels in CentOSPlus. A fresh install is generally strongly preferred over an upgrade. <- Probably you should switch to a upgradable distribution. From MigrationGuide
Mar
21
comment How to identify download traffic using iptables
@Supratik Wow that is outdated (from 2006). It seems that the CentOSPlus repo has newer kernels. Unfortunately I use this other distribution and I can only tell that I never had any problems when upgrading kernels there. Maybe you can test it on a other box first: Clone your system and do the upgrade, if everything works and connbytes is available, do it on the hot system.
Mar
21
comment How to identify download traffic using iptables
@Supratik It is in the mainstream kernel since 2.6.16, maybe you can update the kernel. It is possible to add modules but usually it is as complicated as compiling the whole kernel. What is your kernels version and what distribution are you using?
Mar
20
revised How to identify download traffic using iptables
deleted 61 characters in body; added 136 characters in body
Mar
20
answered How to identify download traffic using iptables
Mar
15
revised iptables redirect local connections to remote system / port
added 130 characters in body
Mar
15
comment iptables redirect local connections to remote system / port
It can happen that you dive to deep into a problem and miss the obvious.
Mar
15
comment iptables redirect local connections to remote system / port
Ok. I think I got the problem, you are doing DNAT on the ${RHS} System right? You can't DNAT traffic that is generated on the local system. You can DNAT on the firewall, but once you passed the firewall you don't need any port forwarding (DNAT) anymore. You just have to change: ssh -L 3389:192.168.0.2:3389 to ssh -L 3389:${LS}:3389
Mar
15
awarded  Quorum
Mar
15
comment iptables redirect local connections to remote system / port
Can you please list your hosts, what you do on what host and how they are connected. I suspect we still don't talk about the same thing.
Mar
13
awarded  Supporter