[LARTC] SYN-DOS rate limit

[LARTC] SYN-DOS rate limit

[Darko Koruga]

Hello,

I have used the example found in SYN-DoS rate limit found in iproute
examples directory. However I get the following error: RTNETLINK
answers: Invalid argument This is from calling the tc filter add dev
eth0 parent ffff: protocol ip prio 50 handle 1 fw police rate 1kbit
burst 40 mtu 9k drop flowid :1 command. Any ideas what I am doing
wrong ? I did read the  man page but it is not too informative.

Thanks,
        Darko

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/

Re: [LARTC] SYN-DOS rate limit

[Martin Devera]

probably FAQ .. did you compiled kernel with QoS enabled ?

On Thu, 31 Jan 2002, Darko Koruga wrote:

> examples directory. However I get the following error: RTNETLINK
> answers: Invalid argument This is from calling the tc filter add dev
> eth0 parent ffff: protocol ip prio 50 handle 1 fw police rate 1kbit
> burst 40 mtu 9k drop flowid :1 command. Any ideas what I am doing
> wrong ? I did read the  man page but it is not too informative.

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/

Re: [LARTC] SYN-DOS rate limit

[Darko Koruga]

On Thu, 31 Jan 2002 11:50:27 +0100 (CET) Martin Devera wrote:

> probably FAQ .. did you compiled kernel with QoS enabled ?
> 
I should bang my head against the wall. I thought I did but I forgot
the option at the end of menuconfig. Recompiling now... Thanks for
reminding me to check very basics first.

D.

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/

Re: [LARTC] SYN-DOS rate limit

[Darko Koruga]

On Thu, 31 Jan 2002 11:50:27 +0100 (CET) Martin Devera wrote:

> probably FAQ .. did you compiled kernel with QoS enabled ?
> 
Ok, now I definitely have QoS enabled. From .config file:
CONFIG_NET_QOS=y
And I still get the same error.

D.

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/

Re: [LARTC] SYN-DOS rate limit

[Martin Devera]

So I suppose you enabled Ingress qdisc and policers too ?
Then someone with policer/ingres experiance should interevent
here .. Anybody ?
devik

On Thu, 31 Jan 2002, Darko Koruga wrote:

> On Thu, 31 Jan 2002 11:50:27 +0100 (CET) Martin Devera wrote:
> 
> > probably FAQ .. did you compiled kernel with QoS enabled ?
> > 
> Ok, now I definitely have QoS enabled. From .config file:
> CONFIG_NET_QOS=y
> And I still get the same error.
> 
> D.
> 
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/
> 
> 

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/