Bachelor Project

Bachelor Project

[Jan Simbera]

To anybody who can help me:
Has anybody implemented the feature for the netfilter ( the
nf_conntrack, the generic, not the IPV4 ) module which deals with
reduplication of the connection status (e.g. when we have two redudant
routers/firewalls)  or has anybody being working on
it presently? I need this information because it is one of the topics of
my new bachelor project. Does
anybody know about any contacts or addresses, where i could get this
information?

Thank you for your help.

Jan Simbera

Faculty if Informatics
www.fi.muni.cz
xsimbera(at)mail(dot)muni(dot)cz
ICQ 136154198

Re: Bachelor Project

[KOVACS Krisztian]

  Hi,

On Friday 04 November 2005 12.59, Jan Simbera wrote:
> Has anybody implemented the feature for the netfilter ( the
> nf_conntrack, the generic, not the IPV4 ) module which deals with
> reduplication of the connection status (e.g. when we have two
> redudant routers/firewalls)  or has anybody being working on
> it presently? I need this information because it is one of the topics
> of my new bachelor project. Does
> anybody know about any contacts or addresses, where i could get this
> information?

  I don't think anyone is currently working on this. The most up-to-date 
IPv4 specific code is in the Netfilter SVN 
(branches/netfilter-ha/linux-2.6-multigroup), and it shouldn't be 
_that_ hard to port it to nf_conntrack.

  The difficult work would be getting it to a state where we can safely 
recommend it for production use... (As currently it contains a lot of 
bugs and even a couple of features are missing.)

  Contact addresses: {laforge,hidden} at netfilter.org or the 
netfilter-ha mailing list on lists.netfilter.org.

-- 
 Regards,
  Krisztian Kovacs

Re: Bachelor Project

[KOVACS Krisztian]

  Hi,

On Friday 04 November 2005 13.34, KOVACS Krisztian wrote:
>   Contact addresses: {laforge,hidden} at netfilter.org or the
> netfilter-ha mailing list on lists.netfilter.org.

  Uhh, no, it's called netfilter-failover. :)

-- 
 Regards,
  Krisztian Kovacs

Bachelor Project

[Jan Simbera]

To anybody who can help me:
Has anybody implemented the feature for the netfilter ( the
nf_conntrack, the generic, not the IPV4 ) module which deals with
reduplication of the connection status (e.g. when we have two redudant
routers/firewalls)  or has anybody being working on
it presently? I need this information because it is one of the topics of
my new bachelor project. Does
anybody know about any contacts or addresses, where i could get this
information?

Thank you for your help.

Jan Simbera

Faculty if Informatics
www.fi.muni.cz
xsimbera(at)mail(dot)muni(dot)cz
ICQ 136154198

Re: Bachelor Project

[Rob Sterenborg]

On Tue, November 1, 2005 15:48, Jan Simbera wrote:
> To anybody who can help me:
> Has anybody implemented the feature for the netfilter ( the
> nf_conntrack, the generic, not the IPV4 ) module which deals with
> reduplication of the connection status (e.g. when we have two
> redudant routers/firewalls)  or has anybody being working on
> it presently? I need this information because it is one of the topics
> of my new bachelor project. Does anybody know about any contacts or
> addresses, where i could get this information?

To me this sounds like a question for the developer list.


Gr,
Rob

Re: Bachelor Project

[Jan Simbera]

Rob Sterenborg wrote:

>On Tue, November 1, 2005 15:48, Jan Simbera wrote:
>  
>
>>To anybody who can help me:
>>Has anybody implemented the feature for the netfilter ( the
>>nf_conntrack, the generic, not the IPV4 ) module which deals with
>>reduplication of the connection status (e.g. when we have two
>>redudant routers/firewalls)  or has anybody being working on
>>it presently? I need this information because it is one of the topics
>>of my new bachelor project. Does anybody know about any contacts or
>>addresses, where i could get this information?
>>    
>>
>
>To me this sounds like a question for the developer list.
>
>
>Gr,
>Rob
>
>
>
>  
>
Sure, but how can i send questions to the developer list? I thought this 
was it.

Jan Simbera

Re: Bachelor Project

[Eric Leblond]

[-- Attachment #1: Type: text/plain, Size: 903 bytes --]

Hi,

Le mardi 01 novembre 2005 à 16:11 +0100, Jan Simbera a écrit :
> Rob Sterenborg wrote:
> >>reduplication of the connection status (e.g. when we have two
> >>redudant routers/firewalls)  or has anybody being working on
> >>it presently? I need this information because it is one of the topics
> >>of my new bachelor project. Does anybody know about any contacts or
> >>addresses, where i could get this information?


The ct_sync project is your friend.
	http://people.netfilter.org/hidden/ct_sync/
I do not know about ipv6 but you may find help on the dedicated list :
	https://lists.netfilter.org/pipermail/netfilter-failover/

BR

> >>    
> >>
> >
> >To me this sounds like a question for the developer list.
> >
> >
> >Gr,
> >Rob
> >
> >
> >
> >  
> >
> Sure, but how can i send questions to the developer list? I thought this 
> was it.
> 
> Jan Simbera
> 

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: Bachelor Project

[Rob Sterenborg]

On Tue, November 1, 2005 16:11, Jan Simbera wrote:
> Rob Sterenborg wrote:
>
...
>
>>To me this sounds like a question for the developer list.
>>
>>
>>Gr,
>>Rob
>>
> Sure, but how can i send questions to the developer list? I thought
> this
> was it.

How about :
http://www.netfilter.org/mailinglists.html#ml-devel

where it says :
"Send mail to the netfilter developer mailinglist."
(mailto:netfilter-devel@lists.netfilter.org)


Gr,
Rob

Bachelor Project

[Jan Simbera]

To anybody who can help me:
Has anybody implemented the linux kernel module which deals with 
connection tracking of the protocol IPV6 or has anybody being working on 
it presently? I need this information because it is one of the topics of 
my bachelor project. I would also like to kno if anybody has been 
working on implementation of the module for IPVS (using IPV6). Does 
anybody know about any contacts or addresses, where i could get this 
information?

Thank you for your help.

Jan Simbera

xsimbera@mail.muni.cz
ICQ 136154198

Re: Bachelor Project

[Henrik Nordstrom]

On Mon, 17 Oct 2005, Jan Simbera wrote:

> Has anybody implemented the linux kernel module which deals with 
> connection tracking of the protocol IPV6 or has anybody being working on 
> it presently?

Yes. Look for nf_conntrack. A very much active project and scheduled to 
replace ip conntrack in some time.

> I would also like to kno if anybody has been working on implementation 
> of the module for IPVS (using IPV6).

No idea. This question is perhaps better asked on the lvs mailing list. 
But probably not.

> Does anybody know about any contacts or addresses, where i could get 
> this information?

For more info in IPVS/LVS see http://www.linuxvirtualserver.org/

nf_conntrack is found from the netfilter page somewhere.

Regards
Henrik