Ipt_random module questions

Ipt_random module questions

[Thomas Sandquist]

Hello,

I'm trying to find out if the ipt_random module can be compiled in to the
2.6 kernels? A few years ago (back in the day of kernel 2.4) I patched and
compiled this module in to the kernel and used it in a load balancing
script (shotgunning cable modems). I'm interested in doing this with a new
box running FC5 (currently kernel 2.6.18) but have found very little
information on it. I finally figured out how to get POM again (I think I
got the right version anyways... it's now POM-NG however the release date
was in 2004) and found the random source there but the info note says it
only works on kernels below 2.6.0. Do I just have too old of a version of
the POM package or is the random module really only available in the 2.4
kernel? If it's not available in the 2.6 kernel are their any alternative
modules that I should be looking in to (perhaps the nth module although I
haven't really read up on it yet)? Any help would be appreciated. It was
great shotgunning cable modems with this setup a few years ago and it
would be even cooler if I could get this working on a more modern distro
(I am open to other distro's other than Fedora if someone knows of one
that might be better for my routing purposes).

Thanks,
Thomas Sandquist

RE: Ipt_random module questions

[Marco Berizzi]

Thomas Sandquist wrote:

>box running FC5 (currently kernel 2.6.18) but have found

2.6.18 has a module called statistic match.
You must upgrade to iptables 1.3.6

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Re: Ipt_random module questions

[Tommy Sandquist]

Thanks for the help! Do you know where I can find more information on 
this statistic match module in 2.6.18. I compiled IPTables 1.3.6 and 
installed it and am now able to add the module to my command line put 
there is very poor documentation on this modules use and capabilities. 
The syntax in iptables didn't help me a whole lot either. I tried using 
this module in random mode and am assuming from the error I was getting 
earlier that I must use a decimal for the probability but then I get 
errors about chain, target, or match not existing when I try to jump 
from that table to my packet marking table (for iproute2 to use). Any 
additional information or sites you can provide with information would 
be of great value.
Also, probably not for this discussion but does anyone know the proper 
way to rebuild the iptables 1.3.6 tarball in to a rpm file? I seriously 
doubt my issues are related to this but just thought I'd ask since the 
binary package is a little cleaner on the package based systems.
Thanks for all the help so far.

Tom

Re: Ipt_random module questions

[Marco Berizzi]

Tommy Sandquist wrote:

>Thanks for the help! Do you know where I can find more information on this 
>statistic match module in 2.6.18. I compiled IPTables 1.3.6

http://www.netfilter.org/projects/patch-o-matic/pom-base.html#pom-base-random

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

How to block Chikka chatting

[Lawrence - Daltron]

Hi,
    Anyone can advice me how to block chikka chatting at firewall ?
    thank in advance.

Lawrence Tang

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Scanned with Copfilter Version 0.83beta2 (ProxSMTP 1.3.91)
AntiVirus: ClamAV 0.88.3/2126 - Fri Oct 27 23:48:55 2006
by Markus Madlener @ http://www.copfilter.org

RE: How to block Chikka chatting

[Rob Sterenborg]

> Hi,
>     Anyone can advice me how to block chikka chatting at firewall ?  
> thank in advance. 

What have you tried already?

This post seems to allow Chikka. If that works then it shouldn't be too
hard to rework the rule for iptables to block Chikka.
http://lists.freebsd.org/pipermail/freebsd-net/2003-October/001578.html

This list has a posting with hints about blocking Chikka servers:
http://www.freelists.org/archives/isalist/02-2006/

To be short: use a packet sniffer to see where a Chikka clients connects
to and block that.


Grts,
Rob