* Filter by IP address problems
From: Damon Brinkley @ 2002-12-11 21:40 UTC (permalink / raw)
To: netfilter
Hey everyone! I'm getting extremely frustrated at iptables right now
because it doesn't seem to follow the rules as ipchains did. Basically
I'm just trying to replace my ipchains server with a new computer that
uses 2.4 and iptables. This is a NAT/gateway machine and we filter our
users by IP addresses. The different ip blocks have certain access to
certain services. I've copied over my old script that's running right
now and changed everything to work with iptables but it doesn't seem to
deny anyone.
Here's the basic rules I have right now for testing.
###################################
# disable ip forwarding while rules are applied
echo 0 > /proc/sys/net/ipv4/ip_forward
/sbin/modprobe iptable_nat
/sbin/modprobe ip_conntrack
/sbin/iptables -F
/sbin/iptables -t nat -F
/sbin/iptables -X
/sbin/iptables -t nat -X
/sbin/iptables -P INPUT DROP
/sbin/iptables -P OUTPUT DROP
/sbin/iptables -P FORWARD DROP
# no access
/sbin/iptables -A INPUT -s 172.17.0.0/20 -j DROP
# NAT
/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
/sbin/iptables -A FORWARD -j ACCEPT
# turn on ip forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward
####################
If I change my laptop IP to 172.17.0.244 then I'm able to ping
www.yahoo.com when the no access rule should deny then from doing
anything. This is all working on a machine that uses ipchains...what am
I doing wrong?
Thanks
Damon Brinkley
^ permalink raw reply
* Re: [announce] procps 2.0.11
From: Andrei Ivanov @ 2002-12-11 21:48 UTC (permalink / raw)
To: Robert Love; +Cc: procps-list, linux-kernel, riel
In-Reply-To: <1039639829.826.119.camel@phantasy>
top reports this:
7 root 18446744073709551615 -20 0 0 0 SW< 0.0 0.0 A0:00 0 mdrecoveryd
8 root 18446744073709551615 -20 0 0 0 SW< 0.0 0.0 0:00 0 raid1d
is this strange or what ?
ps aux says:
root 7 0.0 0.0 0 0 ? SW< Dec09 0:00 [mdrecoveryd]
root 8 0.0 0.0 0 0 ? SW< Dec09 0:00 [raid1d]
(both from 2.0.11)
kernel 2.4.20-pre6
^ permalink raw reply
* Linux Question
From: root @ 2002-12-11 21:47 UTC (permalink / raw)
To: linux-kernel
How do I see my C: drive in linux? I wanted to play my mp3's but there is
not C: drive.
Also, why can't I use AOL in Linux? I put the CD in but nothing happens.
Thanks,
-- Muffy
^ permalink raw reply
* deepspace6 official announcement
From: Mauro Tortonesi @ 2002-12-11 21:38 UTC (permalink / raw)
To: ds6-www, debian-ipv6, chris, kalfa, sullivan, dean, netdev, core
We are proud to announce the birth of a new Linux-related IPv6 portal:
http://www.deepspace6.net.
The Deep Space 6 initiative is born from the experience of two of the
most important Linux- and IPv6-related websites: Project 6 and Peter
Bieringer's www.bieringer.de website. We aim at being a reference
website where the users can find information about the use of the new
IPv6 protocol with the Linux operating system.
Our site is still in construction at this moment, but already features:
- Peter Bieringer's Linux+IPv6 HOWTO and many other interesting articles
- many mailing lists for the discussion about every aspect of the
use of IPv6 under Linux
- a rich collection of IPv6-enabled opensource software
- anonymous and web CVS access to our projects
You are invited to visit our website and send us your comments about our
work or, better, join us in our effort to:
- provide useful information about the use of the new IPv6 protocol
with the Linux operating system
- enhance the IPv6 compliance of existing opensource software
- develop new IPv6-based opensource solutions and services
Deep Space 6 is an initiative which, right from its birth, is open to
every kind of collaboration with volunteers and other similar projects.
We are willing to:
- publish IPv6-related articles and HOWTOs
- host new IPv6-related opensource software projects and provide our
help in their development
- collaborate with other projects and/or add a link to their homepages
- create new mailing lists for especially interesting arguments or
projects
We are looking forward to receive your feedback and, maybe, to start
a new collaboration with you ;-)
--
Aequam memento rebus in arduis servare mentem...
Mauro Tortonesi mauro@deepspace6.net
mauro@ferrara.linux.it
Deep Space 6 - IPv6 on Linux http://www.deepspace6.net
Ferrara Linux Users Group http://www.ferrara.linux.it
^ permalink raw reply
* RE: Firewall help
From: Louie @ 2002-12-11 21:36 UTC (permalink / raw)
To: dewet, netfilter
In-Reply-To: <000301c2a14e$7733f510$0114a8c0@CyberDawn.Net>
Hello all, I also need help on firewall.
I just installed red hat 8 too. I would
like to learn how to set up my linux box
with a firewall that I could edit threw
the command line.
-----Original Message-----
From:
netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.
org]On Behalf Of DeWet van Rooyen
Sent: Wednesday, December 11, 2002 11:50
AM
To: netfilter@lists.netfilter.org
Subject: Firewall help
I installed a machine with Redhat 8 and
are trying to set up a iptables
firewall with 2 internal segments (DMZ
and internal network).
My machine have 3 Network cards.
Is this possible ?
I can seem to get all the segments to
see each other. Can you give me an
idea on how to do this. Is it just a
question of routes / Nat and Arp
entries ?
DMZ - 192.168.1.0 / 255.255.255.0
Internal Network / 192.168.2.0 /
255.255.255.0
For the external interface, I have 64 ip
addresses - 255.255.255.192
^ permalink raw reply
* Re: atyfb in 2.5.51
From: Alan Cox @ 2002-12-11 21:35 UTC (permalink / raw)
To: David S. Miller
Cc: jsimmons, benh, paulus, Linux Kernel Mailing List,
linux-fbdev-devel
In-Reply-To: <20021211.124347.127990341.davem@redhat.com>
On Wed, 2002-12-11 at 20:43, David S. Miller wrote:
> fbdev is nice, in the specific cases where the device fits the fbdev
> model, because once you have the kernel bits you have X support :)
fbdev also can't be used in some situations on x86. Deeply fascinating
things happen on some x86 processors if you execute a loop of code with
an instruction that crosses two different memory types.
^ permalink raw reply
* Re: 2.5 Changes doc update.
From: Mark Fasheh @ 2002-12-11 21:38 UTC (permalink / raw)
To: Dave Jones, Linux Kernel
In-Reply-To: <20021211172559.GA8613@suse.de>
Hey Dave,
First, thanks for a very useful document. I have one comment below:
On Wed, Dec 11, 2002 at 05:25:59PM +0000, Dave Jones wrote:
> Internal filesystems.
> ~~~~~~~~~~~~~~~~~~~~~
> /proc/filesystems will contain several filesystems that are not
> mountable in userspace, but are used internally by the kernel
> to keep track of things. These filesystems are futexfs, eventpollfs
> and hugetlbfs
I don't believe hugetlbfs is an "internal filesystem"... Last time I
checked, it was supposed to be mounted from userspace, and was intended for
use in that context...
--Mark
--
Mark Fasheh
Software Developer, Oracle Corp
mark.fasheh@oracle.com
^ permalink raw reply
* Re: [linux-lvm] Error with 2.5.50-dm-2; vanilla OK
From: Richard Chan @ 2002-12-11 21:30 UTC (permalink / raw)
To: linux-lvm
In-Reply-To: <3DF5DF79.4090708@starhub.net.sg>
[-- Attachment #1: Type: text/plain, Size: 228 bytes --]
I'd like to report that the problem I encountered with 2.5.50-dm-2 (
on LV not mounted, ioctl error) has been fixed in 2.5.51-dm-1. I can
now get all my LVs with it.
Thanks Joe, whatever you did works a charm.
Regards
Richard
[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 2106 bytes --]
^ permalink raw reply
* Re: usage of disarm_decr[]
From: Paul Mackerras @ 2002-12-11 21:29 UTC (permalink / raw)
To: Xiaogeng (Shawn) Jin; +Cc: linuxppc-embedded
In-Reply-To: <3DF7AA61.9020205@redswitch.com>
Xiaogeng (Shawn) Jin writes:
> What's the purpose of using disarm_decr? I read the timer_interrupt()
> code and found the only place where it's referenced.
RT-Linux (www.fsmlabs.com) uses it. RT-Linux takes over all interrupt
handling, including decrementer interrupts, and the disarm_decr thing
is there to give RT-Linux a way to take control of the decrementer
register.
Paul.
** Sent via the linuxppc-embedded mail list. See http://lists.linuxppc.org/
^ permalink raw reply
* [U-Boot-Users] Looking for ARM9E u-boot/linux platform - recommendations?
From: Nye Liu @ 2002-12-11 21:27 UTC (permalink / raw)
To: u-boot
Greetings:
I am working on an embedded linux ARM9E based project and i'm looking
for a good eval board to get my feet wet... any suggestions?
My primary concerns are (in order of importance):
1) MMU/cache/SDRAM support/stability (most important)
2) availability (preferably US mfg'r)
3) linux/u-boot stability
4) cost
5) performance (least important)
PS:
Hi Wolfgang! Moving to another project name will not get rid of me
so easily, muahahaha ;)
--
Nye Liu
nliu at mrv.com
"Who would be stupid enough to quote a fictitious character?"
-- Don Quixote
^ permalink raw reply
* Re: ELKS port of Adventure - help needed :)
From: Richard Wallman @ 2002-12-11 21:27 UTC (permalink / raw)
To: linux-8086
In-Reply-To: <1039594769.1511.27.camel@Castle.goembel>
On 11 Dec, Phil Goembel wrote:
> I'm guessing, without having looked at the code, that this is not a
> source code problem.
Possible a source code or bcc problem - the area to look at is the
function 'binary' in the 'vocab.c' file.
Put:
printf("binary.vocab: mid=%d lo=%d hi=%d\n",mid,lo,hi);
before and after the line:
mid = (lo + hi) / 2;
(about line 596 - I've been messing with my file)
You'll see in the Linux compilation it follows a very nice textbook
binary tree traversal.
In the ELKS version, it starts out badly and just gets worse.
I haven't found the cause yet - it's been a long day, and my brain
isn't working properly :)~
I thought it might be something to do with overflow, but changing the
int defs to long doesn't help.
Still, there should be enough pointers here for someone to figure it
out... (I'm still working on it as well)
P.S. Phil - I think my mailer used your address rather than the list on
my last post. Forward it if you like, but I think this supersedes it.
--
Richard Wallman
http://www.murkygoth.uklinux.net/elks
^ permalink raw reply
* Same with Linux 2.4.20-ac2 <-> Re: Problems compiling 2.4.20 - fail just in 'make' - please help
From: system_lists @ 2002-12-11 21:33 UTC (permalink / raw)
To: linux-kernel
In-Reply-To: <5.1.1.6.2.20021211210820.00cde0c0@192.168.2.131>
Same problem with Linux 2.4.20-ac2
I think its not a kernel code problem. Have any some idea about the real one?
Any compatibility problem with gcc3.2.2 in variable use?
BTW: special warning with:
-> /usr/src/linux-2.4.20/include/linux/kernel.h:10:20: stdarg.h: No such
file or directory
At 21:11 11/12/2002 +0100, system_lists@nullzone.org wrote:
>My gcc compiler:
>
>server01:/usr/src/linux-2.4.20# gcc -v
>Reading specs from /usr/lib/gcc-lib/i386-linux/3.2.2/specs
>Configured with: ../src/configure -v
>--enable-languages=c,c++,java,f77,proto,pascal,objc,ada --prefix=/usr
>--mandir=/usr/share/man --infodir=/usr/share/info
>--with-gxx-include-dir=/usr/include/c++/3.2 --enable-shared
>--with-system-zlib --enable-nls --without-included-gettext
>--enable-__cxa_atexit --enable-clocale=gnu --enable-java-gc=boehm
>--enable-objc-gc i386-linux
>Thread model: posix
>gcc version 3.2.2 20021202 (Debian prerelease)
>
>
>------- the fail --------
>
>server01:/usr/src/linux-2.4.20# make
>gcc -D__KERNEL__ -I/usr/src/linux-2.4.20/include -Wall -Wstrict-prototypes
>-Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer
>-pipe -mpreferred-stack-boundary=2 -march=i686 -DKBUILD_BASENAME=main -c
>-o init/main.o init/main.c
>. scripts/mkversion > .tmpversion
>gcc -D__KERNEL__ -I/usr/src/linux-2.4.20/include -Wall -Wstrict-prototypes
>-Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer
>-pipe -mpreferred-stack-boundary=2 -march=i686 -DUTS_MACHINE='"i386"'
>-DKBUILD_BASENAME=version -c -o init/version.o init/version.c
>gcc -D__KERNEL__ -I/usr/src/linux-2.4.20/include -Wall -Wstrict-prototypes
>-Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer
>-pipe -mpreferred-stack-boundary=2
>-march=i686 -DKBUILD_BASENAME=do_mounts -c -o init/do_mounts.o
>init/do_mounts.c
>make CFLAGS="-D__KERNEL__ -I/usr/src/linux-2.4.20/include -Wall
>-Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common
>-fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=i686 "
>-C kernel
>make[1]: Entering directory `/usr/src/linux-2.4.20/kernel'
>make all_targets
>make[2]: Entering directory `/usr/src/linux-2.4.20/kernel'
>gcc -D__KERNEL__ -I/usr/src/linux-2.4.20/include -Wall -Wstrict-prototypes
>-Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer
>-pipe -mpreferred-stack-boundary=2 -march=i686 -nostdinc -iwithprefix
>include -DKBUILD_BASENAME=sched -fno-omit-frame-pointer -c -o sched.o sched.c
>In file included from /usr/src/linux-2.4.20/include/linux/wait.h:13,
> from /usr/src/linux-2.4.20/include/linux/fs.h:12,
> from /usr/src/linux-2.4.20/include/linux/capability.h:17,
> from /usr/src/linux-2.4.20/include/linux/binfmts.h:5,
> from /usr/src/linux-2.4.20/include/linux/sched.h:9,
> from /usr/src/linux-2.4.20/include/linux/mm.h:4,
> from sched.c:23:
>/usr/src/linux-2.4.20/include/linux/kernel.h:10:20: stdarg.h: No such file
>or directory
>In file included from /usr/src/linux-2.4.20/include/linux/wait.h:13,
> from /usr/src/linux-2.4.20/include/linux/fs.h:12,
> from /usr/src/linux-2.4.20/include/linux/capability.h:17,
> from /usr/src/linux-2.4.20/include/linux/binfmts.h:5,
> from /usr/src/linux-2.4.20/include/linux/sched.h:9,
> from /usr/src/linux-2.4.20/include/linux/mm.h:4,
> from sched.c:23:
>/usr/src/linux-2.4.20/include/linux/kernel.h:74: parse error before "va_list"
>/usr/src/linux-2.4.20/include/linux/kernel.h:74: warning: function
>declaration isn't a prototype
>/usr/src/linux-2.4.20/include/linux/kernel.h:77: parse error before "va_list"
>/usr/src/linux-2.4.20/include/linux/kernel.h:77: warning: function
>declaration isn't a prototype
>/usr/src/linux-2.4.20/include/linux/kernel.h:81: parse error before "va_list"
>/usr/src/linux-2.4.20/include/linux/kernel.h:81: warning: function
>declaration isn't a prototype
>make[2]: *** [sched.o] Error 1
>make[2]: Leaving directory `/usr/src/linux-2.4.20/kernel'
>make[1]: *** [first_rule] Error 2
>make[1]: Leaving directory `/usr/src/linux-2.4.20/kernel'
>make: *** [_dir_kernel] Error 2
>server01:/usr/src/linux-2.4.20#
>
>
>
>???????
>
>-
>To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
>the body of a message to majordomo@vger.kernel.org
>More majordomo info at http://vger.kernel.org/majordomo-info.html
>Please read the FAQ at http://www.tux.org/lkml/
^ permalink raw reply
* [LARTC] Re: your mail
From: devik @ 2002-12-11 21:20 UTC (permalink / raw)
To: lartc
Hi,
I'm forwarding copy of the message to lartc group too as
it may be of general interest.
Regarding your case I'll try to summarize our conversation.
You asked me for explanation of an error message. I answered
and asked for basic informations.
You followed with msg that there is no other info. I directed
you where to find it and reasked basic config info again.
Other mails where you told me that you are experienced enough
and have no errors in your settings (I never told you have
them) - still no tc -s info for me.
And in last mail you told "I am trying to help you more
than you are trying to help me" !!
Well. I can answer only a few things:
1) From the first mail I asked for basic informations (tc -s -d ...)
and I'm NOT ABLE to help you without them ! Instead of providing
them you are telling me that I'm not willing to help.
2) I never underestimated your experience - you don't need to tell me that
you set all correctly - I believe you. But if you want my help
you should give me what I need.
3) I told you that if you got warnings about bad quantums then borrowing
ratios are wrong. You tried to convince me that they are not. PLEASE,
believe me, they are (even if only several percent). Remember - I wrote
the damn thing and I know what it does.
The tc -s -d ... output I need can be obtained in any time - not only
at time of error.
I'd never write a message like this, but your last sentence (that I'm
not willing to help as much as you) disapointed me too much - because
I already have problems in my work because spending my time on HTB
(I'm solving at least one bug report per month - some of them took pretty
long time before discovering that there was no real bug).
It is not the way opensource work like.
have a nice day,
devik
> I haven't forgotten your requests nor am I ignoring you. It didn't do it
> today. Next time it does I will get the output. I am trying to help you more
> than you are trying to help me.
>
> ----- Original Message -----
> From: "devik" <devik@cdi.cz>
> To: "no0ne" <marks@mcn.net>
> Sent: Tuesday, December 10, 2002 2:33 AM
> Subject: Re: your mail
>
>
> > thanks, can you also send me
> > > tc -s -d qdisc
> > > tc -s -d class show dev XXX
> >
> > I asked two times for ? Also from your last mail I feel
> > that you are unsatified with my "support services". Well
> > if you think that I bother you then you think about the
> > fact that I'm trying to help you while having nothing
> > from it !
> >
> > -------------------------------
> > Martin Devera aka devik
> > Linux kernel QoS/HTB maintainer
> > http://luxik.cdi.cz/~devik/
> >
> > On Mon, 9 Dec 2002, no0ne wrote:
> >
> > > Here is some of the debugging info:
> > >
> > > htb*c10117 m=2 t=-26777 c=-31288 pq=0 df\x1441792 ql=0 pa=0 f:
> > > htb*c10080 m=2 t=-45721 c\x12161 pq=0 df\x1998848 ql=0 pa=0 f:
> > > htb*c10091 m=2 t\x163300 cF975 pq=0 dfD982272 ql=0 pa=0 f:
> > > htb*c10109 m=2 t\x168099 cH174 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10118 m=2 t\x163300 cF975 pq=0 df211264 ql=0 pa=0 f:
> > > htb*c10081 m=2 t=-68763 c‡38 pq=0 df"9376 ql=0 pa=0 f:
> > > htb*c10090 m=2 t\x163300 cF975 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10108 m=2 t\x168099 c(187 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10119 m=2 t=-203578 c=-21102 pq=0 dfT8864 ql=0 pa=0 f:
> > > htb*c10028 m=2 t\x162500 cF775 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10039 m=2 t\x161700 cF575 pq=0 df…1968 ql=0 pa=0 f:
> > > htb*c10082 m=2 t\x159300 c\x17638 pq=0 df\x16736256 ql=0 pa=0 f:
> > > htb*c10093 m=2 t\x162500 cF775 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10029 m=2 t\x168099 cH174 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10038 m=2 t62744 c62744 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10083 m=2 t\x168099 cH174 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10092 m=0 t=-156057 c=-57031 pqx001670 dfI152 ql=1 pa=2 f:
> > > htb*c10048 m=2 t\x156900 cE375 pq=0 df85024 ql=0 pa=0 f:
> > > htb*c10059 m=2 t\x159300 cE975 pq=0 df8985728 ql=0 pa=0 f:
> > > htb*c10084 m=2 t\x159300 c'088 pq=0 df\x16736256 ql=0 pa=0 f:
> > > htb*c10095 m=2 t\x161700 cF575 pq=0 df$98560 ql=0 pa=0 f:
> > > htb*c10049 m=2 t\x168099 cH174 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10058 m=2 t\x161700 ci599 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10085 m=2 t=-68763 c\x10375 pq=0 df"9376 ql=0 pa=0 f:
> > > htb*c10094 m=2 t\x162500 cF775 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10068 m=2 t\x163300 cF975 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10079 m=2 t\x163300 cF975 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10086 m=2 t\x168099 cH174 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10097 m=2 t\x162500 cF775 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10069 m=2 t\x161700 c3783 pq=0 df\x14213120 ql=0 pa=0 f:
> > > htb*c10078 m=2 t\x139300 c@975 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10087 m=2 t\x159300 cE975 pq=0 df`000000 ql=0 pa=0 f:
> > > htb*c10096 m=2 t\x168099 cH174 pq=0 df`000000 ql=0 pa=0 f:
> > >
> > > ----- Original Message -----
> > > From: "devik" <devik@cdi.cz>
> > > To: "no0ne" <marks@mcn.net>
> > > Sent: Monday, December 09, 2002 1:39 AM
> > > Subject: Re: your mail
> > >
> > >
> > > > > I didn't see anything after this message. It only did it once and
> the
> > > next
> > > > > time I ran it with the same rates it went through without that
> message.
> > > If
> > > >
> > > > only note, the debug info after the message is output at
> > > > another level (not KERN_ERR). You could see it with "dmesg"
> > > > cmd issued after that or by changing syslog.conf to log
> > > > *.debug somewhere.
> > > > devik
> > > >
> > > >
> > >
> > >
> > >
> >
> >
>
>
>
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
^ permalink raw reply
* Re: Bug Report 2.4.20: Interrupt sharing bogus
From: Stephan von Krawczynski @ 2002-12-11 21:12 UTC (permalink / raw)
To: Alan Cox; +Cc: linux-kernel, marcelo
In-Reply-To: <1039641834.18587.33.camel@irongate.swansea.linux.org.uk>
On 11 Dec 2002 21:23:54 +0000
Alan Cox <alan@lxorguk.ukuu.org.uk> wrote:
> > does not share interrupt with another device. As soon as I share I get
> > busted. As I told the driver used for ethernet doesn't seem to matter as
> > tulip and sundance show the same effect.
> > I am very interested in solving this somehow having five pieces of these
> > boards...
>
> I would be very interested if (and I've seen this before with other
> vendors boards) plugging the quad card into a good old intel 440BX or
> something like that makes them work.
Hm, I have about 2 dozens of these 4-port cards and had _never_ any troubles in
various backplanes, via, intel, sis...
To me it seems it has something to do with this relatively new chipset...
--
Regards,
Stephan
^ permalink raw reply
* [parisc-linux] ["CSA Test Drive" <TestDrive@compaq.com>] FW: Some issues
From: Bdale Garbee @ 2002-12-11 21:13 UTC (permalink / raw)
To: parisc-linux
[-- Attachment #1: Type: text/plain, Size: 52 bytes --]
Forwarded from the testdrive.hp.com folks.
Bdale
[-- Attachment #2: Type: message/rfc822, Size: 1 bytes --]
^ permalink raw reply
* usage of disarm_decr[]
From: Xiaogeng (Shawn) Jin @ 2002-12-11 21:13 UTC (permalink / raw)
To: linuxppc-embedded
disarm_decr[] is defined as an unsigned long array but never get
initialized in arch/ppc/kernel/time.c.
What's the purpose of using disarm_decr? I read the timer_interrupt()
code and found the only place where it's referenced.
int timer_interrupt(struct pt_regs * regs)
{
...
if ( !disarm_decr[smp_processor_id()] )
set_dec(next_dec);
last_jiffy_stamp(cpu) = jiffy_stamp;
...
}
So in this case, the value of disarm_decr[] is always zero, right? Then
the decrementer get set each time when the timer interrupt is invoked.
--
Shawn Jin
RedSwitch Inc.
** Sent via the linuxppc-embedded mail list. See http://lists.linuxppc.org/
^ permalink raw reply
* Re: [2.4]ALi M5451 sound hangs on init; workaround
From: Alan Cox @ 2002-12-11 21:12 UTC (permalink / raw)
To: Fedor Karpelevitch; +Cc: lkml, Vicente Aguilar, alsa-devel, Debian-Laptops
In-Reply-To: <200212111142.31709.fedor@apache.org>
On Wed, 2002-12-11 at 19:42, Fedor Karpelevitch wrote:
> So I wonder what toggling those bits is supposed to change. I would
> test that somehow then
6 channel audio mode
^ permalink raw reply
* RE: Client tuning
From: Brashers_Per @ 2002-12-11 21:10 UTC (permalink / raw)
To: nfs
Much information is available about the Celerra from:
http://www.emc.com/products/networking/celerra.jsp?openfolder=storage_networ
king
to quote the website:
The Celerra Clustered Network Server (CNS) is the world's fastest and most
scalable NAS gateway, delivering up to 200,000 operations per second and
supporting up to 224 direct network connections.
<snip>
EMC Celerra solutions all share the powerful DART operating environment and
tool set, providing a smooth path for growth as your performance and
capacity requirements expand.
Or in real speak: it is a modular box with a GNU friendly OS that works
with NFS and CIFS (if anyone cares) and can be modified in similar ways to
what you already do (if your a Linux geek).
In general using UDP requires a near perfect network (read -private
segment-) to gain much of its advantages, and V3 has many improvements over
V2. So your network will determine UDP/TCP and I have never seen a time to
need V2 over V3.
Much of the tuning listed on nfs.sorceforge.net is great. If you have not
checked it out yet, do so.
Just my $.02
Per
-------------------------------
Date: Wed, 11 Dec 2002 13:11:45 +0000
From: Jose Celestino <japc@co.sapo.pt>
To: nfs@lists.sourceforge.net
Subject: [NFS] Client tuning
Hello,
I need some help fine tuning some NFS clients.
The server is a blackbox (an EMC Celerra which we don't administer, we
can't touch it, we can only give some hints and pray) the clients are
Linux boxes with kernel >= 2.4.18.
This system will be used, exclusivelly, as a webmail system with maildir
format "mailboxes". That means lots (ithousands to millions) of small
iles (<=30Kb) and tons of accesses to that same files. Access will be
made via an IMAP server, a POP server and a SMTP server.
I have the option of choosing between NFSv2/v3 and TCP/UDP and the
freedom to fully configure/reconfigure the client boxes. Any thoughs on
what I might tweak and look for? Any experiences on this?
TIA.
--
Jose Celestino | http://xpto.org/~japc/files/japc-pgpkey.asc
----------------------------------------------------------------
"Don't summarize. Don't abbreviate. Don't interpret." -- djb
-------------------------------------------------------
This sf.net email is sponsored by:
With Great Power, Comes Great Responsibility
Learn to use your power at OSDN's High Performance Computing Channel
http://hpc.devchannel.org/
_______________________________________________
NFS maillist - NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs
^ permalink raw reply
* Re: atyfb in 2.5.51
From: Paul Mackerras @ 2002-12-11 21:06 UTC (permalink / raw)
To: James Simmons
Cc: David S. Miller, Benjamin Herrenschmidt,
Linux Kernel Mailing List, Linux Fbdev development list
In-Reply-To: <Pine.LNX.4.33.0212110709030.2617-100000@maxwell.earthlink.net>
James Simmons writes:
> :-( True. We should always assume X or any userland app could be broken.
I don't think we can blame X in this particular situation. When I
press ctrl-alt-F1 in X, it resets the screen to the colormap and depth
that the text console was using, but the kernel doesn't redraw the
text console screen image. (I presume it also resets the resolution,
but since I have only tried on an LCD screen I can't say for sure.)
Paul.
^ permalink raw reply
* Re: [PATCH] dm.c - device-mapper I/O path fixes
From: Paul Mackerras @ 2002-12-11 21:12 UTC (permalink / raw)
To: Kevin Corry; +Cc: Denis Vlasenko, Joe Thornber, Kernel Mailing List, lvm-devel
In-Reply-To: <02121108060005.29515@boiler>
Kevin Corry writes:
> Storing an int is *not* atomic unless it is declared as atomic_t and you use
> the appropriate macros (see include/asm-*/atomic.h). Remember, we are talking
> about a field in a data structure that can be accessed from multiple threads
> on multiple CPUs.
As a practical matter, I believe that storing an int to an int-aligned
address _is_ actually atomic on any CPU that can run Linux. The
PowerPC architecture spec requires that single-word (i.e. 32-bit)
aligned stores are atomic, for instance, and I think that would be the
case on any other sane architecture as well.
The language lawyers would probably agree with you, though.
Regards,
Paul.
^ permalink raw reply
* Re: Filter by IP address problems
From: Marcello Scacchetti @ 2002-12-11 21:04 UTC (permalink / raw)
To: netfilter
In-Reply-To: <1039642859.4340.14.camel@damon.betcolan>
Hi Damon,
can you post on this list the output of:
iptables -nL
and of:
iptables -t nat -nL
and if possible the output of:
ifconfig
hiding public ip addresses?
If you prefer you can use output of iptables-save for me is the same.
Thanks,
Marcello
Il mer, 2002-12-11 alle 22:40, Damon Brinkley ha scritto:
> Hey everyone! I'm getting extremely frustrated at iptables right now
> because it doesn't seem to follow the rules as ipchains did. Basically
> I'm just trying to replace my ipchains server with a new computer that
> uses 2.4 and iptables. This is a NAT/gateway machine and we filter our
> users by IP addresses. The different ip blocks have certain access to
> certain services. I've copied over my old script that's running right
> now and changed everything to work with iptables but it doesn't seem to
> deny anyone.
>
> Here's the basic rules I have right now for testing.
>
> ###################################
>
> # disable ip forwarding while rules are applied
> echo 0 > /proc/sys/net/ipv4/ip_forward
>
> /sbin/modprobe iptable_nat
> /sbin/modprobe ip_conntrack
>
> /sbin/iptables -F
> /sbin/iptables -t nat -F
> /sbin/iptables -X
> /sbin/iptables -t nat -X
>
> /sbin/iptables -P INPUT DROP
> /sbin/iptables -P OUTPUT DROP
> /sbin/iptables -P FORWARD DROP
>
> # no access
> /sbin/iptables -A INPUT -s 172.17.0.0/20 -j DROP
>
> # NAT
> /sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> /sbin/iptables -A FORWARD -j ACCEPT
>
> # turn on ip forwarding
> echo 1 > /proc/sys/net/ipv4/ip_forward
>
> ####################
>
> If I change my laptop IP to 172.17.0.244 then I'm able to ping
> www.yahoo.com when the no access rule should deny then from doing
> anything. This is all working on a machine that uses ipchains...what am
> I doing wrong?
>
> Thanks
> Damon Brinkley
--
Marcello Scacchetti <marcello.scacchetti@nextrem.it>
^ permalink raw reply
* Re: ANNOUNCE: UKW Tools 0.02 released
From: Stephen Kitchener @ 2002-12-11 21:01 UTC (permalink / raw)
To: g4klx, Jonathan Naylor, linux-hams
In-Reply-To: <200212110905.58203.jonathan.naylor@ggaweb.ch>
On Wednesday 11 Dec 2002 08:05, Jonathan Naylor wrote:
Hi Jonathon,
> Hi Folks
>
> The G4KLX software foundry is happy to announce that UKW Tools 0.02 has
> been released. So what is UKW Tools ?
Downloaded and compiled ok ok Mandrake 8.2, I wonder if anyone else has had
the problems you talked about when they try and compile this and other
software on Mandrake 9.0, and if there is a solution ?
>
> UKW Tools is a kind of Goegraphic Information System (GIS) for radio
> amateurs. Taking elevation data that is freely available on the
> Internet, the program includes a suite of different funtions that allow
> you to visualise radio paths and locations.
>
> I suggest that you look on my web site http://www.qsl.net/g4klx under
> Software and have a look at screen shots for more information, but
> briefly, the current functions are:
>
> 3D Map: Produces a map centred on a location that shows the topography
> around it. The colours may be changed, the viewing angle may be changed
> as can the type of projection used.
>
> Horizon View: Plots the elevations of the surrounding obstacles as
> viewed from a site, an indication of their elevations and distance is
> given.
>
> Show Map: Displays a map centred on a location with different colours
> used to denote heights. Moving the mouse over the map will result in
> information about the location below the mouse (locator and elevation).
> The colours may be changed.
>
> Terrain: Given two locations the program will show the line of sight
> path between them. In many ways this is the most interesting function.
> The K (essentially the tropo conditions) value may be changed and when
> the mouse is over the disgram some data about the location pointed to
> will be shown.
>
> There are two functions, Local Map and View which have not been
> implemented yet.
>
> UKW Tools 0.01 was released a little while ago but not announced because
> it was a premature release to allow some operators to check their
> sites.
>
> UKW Tools is written in C++ and makes use of the platform independent
> wxWindows toolkit and it is possible that it could be built on Windows
> as well as Linux.
>
> Jonathan G4KLX (HB9DRD until February 2003)
>
> PS An article about the DSP functions used and the implementation of
> LinWSJT is to be published in DUBUS 4/2002, and it can also be
> downloaded from the Software page also. Warning, it is in Word 2000
> format.
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-hams" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
--
Stephen Kitchener
"The best way to accellerate a win9x machine is at 9.81m/s2"
^ permalink raw reply
* Re: 2.5.51 nanosleep fails
From: Jim Houston @ 2002-12-11 21:05 UTC (permalink / raw)
To: Marco d'Itri, linux-kernel
Marco d'Itri wrote:
> nanosleep fails after being interrupted:
>
> [...]
> nanosleep({1, 0},
> [1]+ Stopped strace tail -f /var/log/uucp/Log
> md@wonderland:~$ fg
> strace tail -f /var/log/uucp/Log
> <unfinished ...>
> --- SIGCONT (Continued) ---
> <... nanosleep resumed> 0) = -1 ENOSYS (Function not implemented)>
>
> This can be reliably reproduced.
Hi Marco, Everyone,
I was able to reproduce this issue. It happens on all the
kernels I tried including a stock Redhat kernel. This is just
an idiosyncrasy of strace. In this case both the strace and
tail are sent a SIGTSTP when they are put into the background.
Its not suprising that this might confuse strace.
I also tried this with a program which just does a long
nanosleep. Strace still shows a return of ENOSYS but the
program actually gets the correct EINTR.
Jim Houston - Concurrent Computer Corp.
^ permalink raw reply
* what's this in my ip_conntrack
From: james.Q.L @ 2002-12-11 20:55 UTC (permalink / raw)
To: netfilter
just curious, i checked /proc/net/ip_conntrack in my gateway computer and found this,
the gateway 192.168.0.1 sends request to all the internal ip (goes on to 192.168.0.254). is it a
network broadcast or what, for what reason ? .0.1 and .0.3 are alway almost connected to the Lan.
tcp 6 134316 ESTABLISHED src=192.168.0.1 dst=192.168.0.255 sport=42750 dport=80 [UNREPLIED]
src=192.168.0.255 dst=192.168.0.1 sport=80 dport=42750 use=1
tcp 6 134280 ESTABLISHED src=192.168.0.1 dst=192.168.0.0 sport=42750 dport=80 [UNREPLIED]
src=192.168.0.0 dst=192.168.0.1 sport=80 dport=42750 use=1
tcp 6 134286 ESTABLISHED src=192.168.0.1 dst=192.168.0.0 sport=42751 dport=80 [UNREPLIED]
src=192.168.0.0 dst=192.168.0.1 sport=80 dport=42751 use=1
tcp 6 134312 ESTABLISHED src=192.168.0.1 dst=192.168.0.2 sport=42750 dport=80 [UNREPLIED]
src=192.168.0.2 dst=192.168.0.1 sport=80 dport=42750 use=1
tcp 6 134312 ESTABLISHED src=192.168.0.1 dst=192.168.0.2 sport=42751 dport=80 [UNREPLIED]
src=192.168.0.2 dst=192.168.0.1 sport=80 dport=42751 use=1
tcp 6 134312 ESTABLISHED src=192.168.0.1 dst=192.168.0.4 sport=42750 dport=80 [UNREPLIED]
src=192.168.0.4 dst=192.168.0.1 sport=80 dport=42750 use=1
tcp 6 134312 ESTABLISHED src=192.168.0.1 dst=192.168.0.4 sport=42751 dport=80 [UNREPLIED]
src=192.168.0.4 dst=192.168.0.1 sport=80 dport=42751 use=1
tcp 6 134312 ESTABLISHED src=192.168.0.1 dst=192.168.0.5 sport=42750 dport=80 [UNREPLIED]
src=192.168.0.5 dst=192.168.0.1 sport=80 dport=42750 use=1
......
...... more ..
tcp 6 134315 ESTABLISHED src=192.168.0.1 dst=192.168.0.254 sport=42750 dport=80 [UNREPLIED]
src=192.168.0.254 dst=192.168.0.1 sport=80 dport=42750 use=1
=====
/James.Q.L
______________________________________________________________________
Post your free ad now! http://personals.yahoo.ca
^ permalink raw reply
* 2.5.51 - Strange UP APIC / 8139too / USB issues
From: Stephen Wille Padnos @ 2002-12-11 20:58 UTC (permalink / raw)
To: linux-kernel
Hi all.
I have a system with an Abit AT7 motherboard: VIA KT333, single Athlon,
512M RAM, onboard RTL8139 network, USB, USB2, 1394. *NO* onboard PS/2
keyboard or mouse ports.
Other: IDE HD, CD-RW, and DVD. Radeon 8500DV (will try getting that
working later :)
I have used the system successfully with 2.4, and have been trying to
get 2.5 to work. Until now, I haven't been able to get the USB keyboard
to work. It is initialized by the BIOS, and is usable by GRUB for
selecting boot images.
I finally found the culprit - "Local APIC Support on Uniprocessors" and
"IO-APIC on uniprocessors". If both items are enabled, the network
functions, but USB doesn't work. If not both are enabled (neither, or
Local APIC but not IO-APIC), then the USB system works, but the network
doesn't. :(
I am not using modules.
these are the only differences in .config:
multimedia linux-2.5.51 # diff -u working_network
working_usbkeyboard_config3
--- working_network 2002-12-11 15:43:31.000000000 -0500
+++ working_usbkeyboard_config3 2002-12-11 15:15:53.000000000 -0500
@@ -63,9 +63,8 @@
# CONFIG_SMP is not set
# CONFIG_PREEMPT is not set
CONFIG_X86_UP_APIC=y
-CONFIG_X86_UP_IOAPIC=y
+# CONFIG_X86_UP_IOAPIC is not set
CONFIG_X86_LOCAL_APIC=y
-CONFIG_X86_IO_APIC=y
CONFIG_X86_MCE=y
CONFIG_X86_MCE_NONFATAL=y
# CONFIG_X86_MCE_P4THERMAL is not set
I can send complete configs, lspci / lsusb / whatever else anyone wants.
Thanks
- Steve
^ permalink raw reply
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.