* Re: Question on set_page_dirty()
From: Ingo Oeser @ 2002-12-12 9:29 UTC (permalink / raw)
To: Jan Hudec, Martin Maletinsky, linux-mm, kernelnewbies
In-Reply-To: <20021211080102.GG20525@vagabond>
Hi,
On Wed, Dec 11, 2002 at 09:01:02AM +0100, Jan Hudec wrote:
> > What is the meaning of this dirty queue, what is the effect of linking
> > a page onto that queue, and when should the set_page_dirty() function
> > be used rather than the
> > SetPageDirty() macro?
>
> If you use the SetPageDirty macro, then the page is marked dirty, but
> kernel can't find it when it should clean it. Thus it eventualy won't
> flush the data (it won't call writepage on it).
set_page_dirty() can be used in all cases, IMHO, since it:
- will not sleep
- will not call the set_page_dirty() method, if page has been dirty
before (test_and_set_XXX is atomic an guarantees to trigger
once only)
- will not do anything besides settingt the PG_Dirty bit,
if the page contains no mapping, or does not contain a
set_page_dirty_method
So if set_page_dirty() exists on a certain kernel you want to
support, it should be used in all cases. Accounting code can also
be hooked into this, if it is used properly.
Regards
Ingo Oeser
--
Science is what we can tell a computer. Art is everything else. --- D.E.Knuth
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/
^ permalink raw reply
* Re: Iptables and various domains
From: Blizzards @ 2002-12-12 9:29 UTC (permalink / raw)
To: E-GIM Security; +Cc: netfilter
In-Reply-To: <NEBBKLENIBMGHGCLGBPIKEBKCDAA.security@e-gim.es>
This is not an iptables work.
You can use iptables to DNAT your webserver1 and webserver2 port 80 to
internal webservers port 80,
and use HTTPd (like apache, iis, netscape, zeus, ecc) + DNS to do a
name based virtual hosts resolving.
Bye.
G.
> Hi,
>
> Can Iptables route by domains? For example, I have a webserver and my
>firewall with iptables route all request on port 80 throw IP webserver. I
>need add another webserver, and various domains (www.dom1.com, www.dom2.com)
>will be redirect to webserver-1 and other domains (www.dom3.com,
>www.dom4.com) will be redirect to webserver-2. Can IPTables help me? Which
>is the solution)
>
> Thanks and sorry ... my english is very poor.
>
>José Antonio García García
>Technical Internet Solutions
>
>E-GIM +34 952700010
>http://www.e-gim.es
>
>
>
>
>
>
^ permalink raw reply
* [PATCH] 2.5 fix for > 25 disks
From: Anton Blanchard @ 2002-12-12 9:33 UTC (permalink / raw)
To: linux-kernel; +Cc: torvalds
Hi,
2.5 currently tries to register disk sda twice. Not nice and now we use
sysfs to do name to dev_t mapping, I couldnt mount my root filesystem.
Anton
===== drivers/scsi/sd.c 1.96 vs edited =====
--- 1.96/drivers/scsi/sd.c Sat Nov 30 09:56:42 2002
+++ edited/drivers/scsi/sd.c Thu Dec 12 20:19:12 2002
@@ -1217,7 +1217,7 @@
gd->minors = 16;
gd->fops = &sd_fops;
- if (index > 26) {
+ if (index >= 26) {
sprintf(gd->disk_name, "sd%c%c",
'a' + index/26-1,'a' + index % 26);
} else {
^ permalink raw reply
* modprobe: Can't locate module personality-8
From: Stephan van Hienen @ 2002-12-12 9:32 UTC (permalink / raw)
To: linux-kernel; +Cc: sparclinux
Dec 8 18:59:46 ddx modprobe: modprobe: Can't locate module personality-8
Dec 8 18:59:46 ddx modprobe: modprobe: Can't locate module personality-8
..
Dec 8 19:16:15 ddx modprobe: modprobe: Can't locate module personality-8
Dec 8 19:16:55 ddx last message repeated 6 times
Dec 8 19:17:06 ddx last message repeated 3 times
..
Dec 11 10:06:12 ddx modprobe: modprobe: Can't locate module personality-8
Dec 11 10:06:12 ddx modprobe: modprobe: Can't locate module personality-8
Did i forget to compile something in the kernel ?
(2.4.20 on sun ultrasparc)
^ permalink raw reply
* Re: 2.5.51 modprobe bttv hangs
From: Kees Bakker @ 2002-12-12 9:25 UTC (permalink / raw)
To: linux-kernel; +Cc: Rusty Russell
In-Reply-To: <20021212003758.246FD2C0BD@lists.samba.org>
>>>>> "Rusty" == Rusty Russell <rusty@rustcorp.com.au> writes:
Rusty> Thanks for the report. Looks like bttv does a request module
Rusty> from its init function. Please try the following fix and report back.
Yep, now it loads my bttv modules.
Thanks. (Still have to try and see if xawtv works.)
FYI
iris:~# modprobe bttv
iris:~# lsmod
Module Size Used by
tuner 10671 1 [unsafe]
tvaudio 14049 1 [unsafe]
msp3400 17120 1 [unsafe]
bttv 85118 0
video_buf 13473 1 bttv [permanent]
i2c_algo_bit 8551 2 bttv [unsafe]
i2c_core 19367 5 tuner tvaudio msp3400 bttv i2c_algo_bit
ov511 75091 0
rtc 8637 0
Kees
^ permalink raw reply
* getting IP-address of a packet using libipq ?
From: naren @ 2002-12-12 9:17 UTC (permalink / raw)
To: netfilter
Greetings everyone,
the libipq library tells about a lot of fields of a queued packet... But I
could not find one which tells what the source and destination IP-address
of the packet is... !!
Is there a way that I can get the IP-address from the libipq directly... if
not is there a way that I can use the packet payload and get the IP-address.
Forgive if the question is silly.
Regards,
Narendra
In the middle of difficulty..... lies Opportunity. (Albert Einstein)
--------------------------------------------------------------------
Narendra Prabhu. B Free Software at its product-ive best.
DeepRoot Linux http://www.deeproot.co.in
---- Server Appliances ----
---- Linux Support and Services ----
-------------------------------------------------------------------
--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .
^ permalink raw reply
* QoS using HTB and SFQ ...
From: Raymond Leach @ 2002-12-12 9:17 UTC (permalink / raw)
To: Netfilter Mailing List
[-- Attachment #1: Type: text/plain, Size: 1037 bytes --]
Hi
Does anyone have any experience (good or bad) with using htb and sfq to
do QoS using 2.4.20 kernels?
I compiled the kernel, installed the image, but tc tells me that htb is
an unknown qdisc. I checked that I did select htb in the QoS section.
Any ideas?
Ray
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
( Raymond Leach )
) Knowledge Factory (
( )
) Tel: +27 11 445 8100 (
( Fax: +27 11 445 8101 )
) (
( http://www.knowledgefactory.co.za/ )
) http://www.saptg.co.za/ (
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
o o
o o
.--. .--.
| o_o| |o_o |
| \_:| |:_/ |
/ / \\ // \ \
( | |) (| | )
/`\_ _/'\ /'\_ _/`\
\___)=(___/ \___)=(___/
[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply
* Re: non-standard FTP ports and connection tracking (redux)
From: Jozsef Kadlecsik @ 2002-12-12 9:16 UTC (permalink / raw)
To: Alexandros Papadopoulos; +Cc: netfilter
In-Reply-To: <200212101118.53239.apapadop@cmu.edu>
On Tue, 10 Dec 2002, Alexandros Papadopoulos wrote:
> The default behavior is DROP for all chains, so if these ones don't
> allow it, then it is blocked. I thought these ones were sufficient. I'm
> attaching the complete ruleset I'm using.
Your ruleset seems to be all right. At some places strange, but seems to
be OK.
> > I'd setup logging rules to see where and why the connection gets
> > blocked.
>
> I've monitored the packets with Ethereal and seen that the problem is
> the one mentioned -- the SYN packet from the client that tries to open
> the data connection (when in passive mode) never makes it through the
> firewall.
>
> The question is, why doesn't connection tracking pick this up and allow
> the packet to go through? (since it's a RELATED connection to a
> preexisting FTP session)
I can repeat only myself: I'd setup logging rules to see where and why the
connection gets blocked.
Regards,
Jozsef
-
E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
^ permalink raw reply
* Re: Is this going to be true ?
From: Ragnar Hojland Espinosa @ 2002-12-12 9:22 UTC (permalink / raw)
To: Henning P. Schmiedehausen; +Cc: linux-kernel
In-Reply-To: <at8jcm$n8u$1@forge.intermeta.de>
On Wed, Dec 11, 2002 at 11:57:10PM +0000, Henning P. Schmiedehausen wrote:
> mru@users.sourceforge.net (=?iso-8859-1?q?M=E5ns_Rullg=E5rd?=) writes:
>
> >> Competition is always good. It inpires people to do better.
>
> >Doing better than MS isn't much of an inspiration to me.
>
> There are no similar applications like the Exchange Server or the
> BizTalk server for Linux. I'd see them port all of the server portions
> of these applications to an *ix platform (be it MacOS X, *BSD or
I point your attention towards suse's open exchange server (which isnt
open, or free, btw)
http://www.suse.com/us/business/products/suse_business/openexchange/
--
Ragnar Hojland - Project Manager
Linalco "Especialistas Linux y en Software Libre"
http://www.linalco.com Tel: +34-91-5970074 Fax: +34-91-5970083
^ permalink raw reply
* Re: "bio too big" error
From: Joe Thornber @ 2002-12-12 9:22 UTC (permalink / raw)
To: Jens Axboe; +Cc: Wil Reichert, Andrew Morton, linux-kernel
In-Reply-To: <20021211072139.GF16003@suse.de>
On Wed, Dec 11, 2002 at 08:21:39AM +0100, Jens Axboe wrote:
> On Tue, Dec 10 2002, Wil Reichert wrote:
> > Exact error with debug is:
> >
> > darwin:/a01/mp3s/Skinny Puppy/Too Dark Park# ogg123 -q 01\ -\
> > Convulsion.ogg
> > bio too big device ide0(3,4) (256 > 255)
>
> looks like a one-off in the dm merge_bvec function.
Nope, we're not using merge_bvec yet. Kevin Corry has convinced me
that there is a bug in dms bv splitting code, I'll put out a new
patchset later. However the known bug wouldn't have a stack trace
like this.
- Joe
^ permalink raw reply
* Re: [PATCH] declare and export scsi_bus_type
From: Christoph Hellwig @ 2002-12-12 9:12 UTC (permalink / raw)
To: Matt Domsch; +Cc: linux-scsi, mochel
In-Reply-To: <Pine.LNX.4.44.0212111943110.13262-100000@humbolt.us.dell.com>
On Wed, Dec 11, 2002 at 07:46:22PM -0600, Matt Domsch wrote:
> Below please find a patch, written by Pat Mochel, to declare and export
> scsi_bus_type. My EDD code requires this to be exported in order to walk
> the list of SCSI devices to match what BIOS discovered.
I'm very unhappy with exporting random parts of the scsi midlayer. In
what way do you need it? How does your code work with modular scsi?
^ permalink raw reply
* service meter port
From: netfilter @ 2002-12-12 9:11 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 143 bytes --]
Hi,
I've noticed a few attempted connections to port 2603 (servicemeter), what is this port for and what does it do ?
Thanks
Wasim
[-- Attachment #2: Type: text/html, Size: 771 bytes --]
^ permalink raw reply
* Re: Why does C3 CPU downgrade in kernel 2.4.20?
From: Joseph @ 2002-12-12 9:17 UTC (permalink / raw)
To: Linux Kernel Mailing List
In-Reply-To: <Pine.LNX.4.44.0212111151410.1397-100000@twin.uoregon.edu>
Thanks for all response. :)
I think I know more why it downgrades.
But one more curious question.
In the file, arch/i386/Makefile, under kernel 2.5.51.
I found the C3 alignments , $(call check_gcc, -march=c3,-march=i486).
Does the C3 CPU type be included in gcc compile option??
I've downloaded the latest gcc 3.2.1 version.
But I don't find the c3 options in the file gcc/config/i396/i386.c, i386.h
or etc.
BR,
Joseph
-----------------------------------------------------------------
< 每天都 Yahoo!奇摩 > www.yahoo.com.tw
^ permalink raw reply
* Penetration testing.
From: Paulo Andre @ 2002-12-12 9:09 UTC (permalink / raw)
To: netfilter
I have set up a new iptables firewall and would like to test it
throughly. Can anyone suggest some good penetration testing
utilities/packages
Thanks
^ permalink raw reply
* aic7xxx in kernel 2.4.18
From: m&m's @ 2002-12-12 9:16 UTC (permalink / raw)
To: linux-kernel
Hello
I'm looking for main differences between aic7xxx driver from kernel 2.4.9
and aic7xxx from kernel 2.4.18. With newer version of kernel there is a
message while system is started :
modprobe -k scsi_hostadapter errno=2
HINT : Try to change IRQ or IO settings (it sounds sth like this)
/lib/aic7xxx not found
With older version of kernel all is fine. I would like to add that scsi
driver is loading to kernel as module
Any hints?
regards
Mariusz Bozewicz
^ permalink raw reply
* Re: "bio too big" error
From: Joe Thornber @ 2002-12-12 9:12 UTC (permalink / raw)
To: Wil Reichert; +Cc: Greg KH, kernel list
In-Reply-To: <20021212001542.51940.qmail@web40109.mail.yahoo.com>
On Wed, Dec 11, 2002 at 04:15:42PM -0800, Wil Reichert wrote:
> Ok, 2.5.51 plus dm patches result in the following:
>
> Initializing LVM: device-mapper: device
> /dev/ide/host2/bus1/target0/lun0/disc too small for target
> device-mapper: internal error adding target to table
> device-mapper: destroying table
> device-mapper ioctl cmd 2 failed: Invalid argument
> Couldn't load device 'cheese_vg-blah'.
> 0 logical volume(s) in volume group "cheese_vg" now active
> lvm2.
>
> Was fine (minus of course the entire bio thing) in 50, did something
> break in 51 or is it just my box?
I've had a couple of reports of this problem. The offending patch is:
http://people.sistina.com/~thornber/patches/2.5-stable/2.5.51/2.5.51-dm-1/00005.patch
back it out if necc.
All it does is:
--- diff/drivers/md/dm-table.c 2002-12-11 11:59:51.000000000 +0000
+++ source/drivers/md/dm-table.c 2002-12-11 12:00:00.000000000 +0000
@@ -388,7 +388,7 @@
static int check_device_area(struct dm_dev *dd, sector_t start, sector_t len)
{
sector_t dev_size;
- dev_size = dd->bdev->bd_inode->i_size;
+ dev_size = dd->bdev->bd_inode->i_size >> SECTOR_SHIFT;
return ((start < dev_size) && (len <= (dev_size - start)));
}
ie. previously we were accidentally comparing bytes with sectors to
verify the device sizes. So either I'm being very stupid (likely) and
the above patch is bogus, or you really don't have room for this lv.
Can you send me 3 bits of information please:
1) disk/partition sizes for your PVs
2) an LVM2 backup of the metadata (the nice readable ascii one).
3) The version of LVM that *created* the lv.
Thanks,
- Joe
^ permalink raw reply
* 2.5.51-mm2
From: Andrew Morton @ 2002-12-12 9:03 UTC (permalink / raw)
To: lkml, linux-mm
url: http://www.zip.com.au/~akpm/linux/patches/2.5/2.5.51/2.5.51-mm2/
-> 2.5.51-mm2-shpte.gz For Dave
-> 2.5.51-mm2.gz Full series
Numerous fixes, and dcache_rcu has been resurrected.
Additions since 2.5.51-mm1:
+PF_MEMALLOC-no-recur.patch
Fix a potential recursion problem in the page allocator
+mempool-atomic-check.patch
A little cleanup
+page-allocator-off-by-one.patch
A little bugfix
+remove-PF_NOWARN.patch
Remove current->flags:PF_NOWARN, use __GFP_NOWARN
+scheduler-tunables.patch
rml's scheduler tweakables. See Documentation/filesystems/proc.txt
+cacheline-aligned-pte_chains.patch
Ensure that pte_chains are cacheline aligned
+ext2-sync-dir-fix.patch
ext2 buglet
+mmap-rounding-fix.patch
mmap corner case
+blocking-kswapd.patch
Make kswapd block against request queues. Fixes some search complexity
problems.
+dcache_rcu-2.patch
+dcache_rcu-3.patch
RCU for dcache locking.
All 67 patches:
kgdb.patch
PF_MEMALLOC-no-recur.patch
Avoid recursion in the page allocator
dio-return-partial-result.patch
aio-direct-io-infrastructure.patch
AIO support for raw/O_DIRECT
deferred-bio-dirtying.patch
bio dirtying infrastructure
aio-direct-io.patch
AIO support for raw/O_DIRECT
aio-dio-debug.patch
dio-reduce-context-switch-rate.patch
Reduced wakeup rate in direct-io code
cputimes_stat.patch
Retore per-cpu time accounting, with a config option
deprecate-bdflush.patch
deprecate use of bdflush()
reduce-random-context-switch-rate.patch
Reduce context switch rate due to the random driver
bcrl-printk.patch
read_zero-speedup.patch
speed up read_zero() for !CONFIG_MMU
nommu-rmap-locking.patch
Fix rmap locking for CONFIG_SWAP=n
semtimedop.patch
semtimedop - semop() with a timeout
writeback-handle-memory-backed.patch
skip memory-backed filesystems in writeback
2-remove-fail_writepage.patch
Remove fail_writepage, redux
wli-show_free_areas.patch
show_free_areas extensions
inlines-net.patch
rbtree-iosched.patch
rbtree-based IO scheduler
deadsched-fix.patch
deadline scheduler fix
quota-smp-locks.patch
Subject: [PATCH] Quota SMP locks
shpte-ng.patch
pagetable sharing for ia32
shpte-nonlinear.patch
shpte: support nonlinear mappings and clean up clear_share_range()
shpte-always-on.patch
Force CONFIG_SHAREPTE=y for ia32
pmd-allocation-fix.patch
make sure all PMDs are allocated under PAE mode
ptrace-flush.patch
Subject: [PATCH] ptrace on 2.5.44
buffer-debug.patch
buffer.c debugging
warn-null-wakeup.patch
pentium-II.patch
Pentium-II support bits
radix-tree-overflow-fix.patch
handle overflows in radix_tree_gang_lookup()
rcu-stats.patch
RCU statistics reporting
auto-unplug.patch
self-unplugging request queues
less-unplugging.patch
Remove most of the blk_run_queues() calls
sync_fs.patch
Add a sync_fs super_block operation
ext3_sync_fs.patch
implement ext3_sync_fs
ext3-fsync-speedup.patch
Clean up ext3_sync_file()
filldir-checks.patch
copy_user checks in filldir()
vmstats-fixes.patch
vm accounting fixes and addition
hugetlb-fixes.patch
hugetlb fixes
writeback-interaction-fix.patch
fs-writeback rework.
scalable-zone-protection.patch
Add /proc/sys/vm/lower_zone_protection
page-wait-table-min-size.patch
Set a minimum hash table size for wait_on_page()
ext3-transaction-reserved-blocks.patch
Reserve an additional transaction block in ext3_dirty_inode
remove-PF_SYNC.patch
dont-inherit-mlockall.patch
Don't inherit mm->def_flags across forks
bootmem-alloc-alignment.patch
bootmem allocator merging fix
ext23_free_blocks-check.patch
ext2/ext3_free_blocks() extra check
blkdev-rlimit.patch
don't allpy file size rlimits to blockdevs
readahead-pinned-memory.patch
limit pinned memory due to readahead
lockless-current_kernel_time.patch
Lockless current_kernel_timer()
remove-vmscan-check.patch
remove a vm debug check
max_sane_readahead.patch
default-super-ops.patch
provide a default super_block_operations
mempool-atomic-check.patch
tidier atomic check in mempool_alloc()
page-allocator-off-by-one.patch
Fix off-by-one in the page allocator
remove-PF_NOWARN.patch
Remove PF_NOWARN
scheduler-tunables.patch
scheduler tunables
cacheline-aligned-pte_chains.patch
pad pte_chains out to a cacheline
ext2-sync-dir-fix.patch
ext2 synchronous mount fix
mmap-rounding-fix.patch
Fix mmap rounding error
blocking-kswapd.patch
Alloc kswapd to block on disk queues
dcache_rcu-2.patch
dcache_rcu-2-2.5.51.patch
dcache_rcu-3.patch
dcache_rcu-3-2.5.51.patch
page-walk-api.patch
page-walk-scsi.patch
page-walk-api-update.patch
pagewalk API update
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/
^ permalink raw reply
* cmipci gameport and gravis gamepad pro
From: anon anon @ 2002-12-12 9:08 UTC (permalink / raw)
To: linux-kernel
I have an AudioExcel AV-511 (cmipci using the alsa drivers) and I'm having a
heck of a time getting my Gravis Gamepad Pro (or the gameport of the cmipci
sound card more to the point) to show up. What kind of gameport do I have
to compile support in for? I tried standard plug and play gameport with the
2.4 kernel and that says no such address etc. when I try to insmod ns558...
I tried compiling it right in to the kernel but it didn't help. I've also
tried the 2.5 kernel but I still don't see anything that looks like a
gameport in dmesg or /proc /devices. Is there any way to get my gameport
on my cmipci sound card to show up under linux (both my Gravis Gamepad Pro's
work good under windows98 so I know the port is good)?
My main goal is to have my gravis gamepad pro (gameport version of the
controller) working in xmame, but just a few hints if someone could give
them to me to get the card to even show up in the /proc filesystem would be
helpfull.
(I've read joystick.txt and input.txt and the new input homepage but I
still have no luck.)
_________________________________________________________________
Add photos to your messages with MSN 8. Get 2 months FREE*.
http://join.msn.com/?page=features/featuredemail
^ permalink raw reply
* Re: separation of sysctl and tcp-window-tracking patch?
From: Jozsef Kadlecsik @ 2002-12-12 9:02 UTC (permalink / raw)
To: James Ralston; +Cc: netfilter-devel
In-Reply-To: <Pine.LNX.4.44.0212120252370.3113-100000@shieldbreaker.l33tskillz.org>
On Thu, 12 Dec 2002, James Ralston wrote:
> I absolutely agree. I would *really* like to be able to tune various
> netfilter-related settings via /proc, regardless of my opinions on the
> tcp-window-tracking patch.
>
> (My specific need is related to DNS service: namely, in many cases, 30
> seconds to establish a UDP session simply isn't enough time to permit
> a reply to an outstanding DNS query. I want to be able to up that
> timeout to something closer to 60 or 120 seconds.)
Please note, that the timeout settings via /proc introduced in the
tcp-window-tracking patch are global. You cannot raise the UDP timeout
values just for DNS.
Also, we have to handle the backward compatibility issue of
/proc/sys/net/ipv4/ip_conntrack_max, if the introduction of
/proc/sys/net/ipv4/netfilter/ is accepted.
Regards,
Jozsef
-
E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
^ permalink raw reply
* Iptables and various domains
From: E-GIM Security @ 2002-12-12 8:58 UTC (permalink / raw)
To: netfilter
Hi,
Can Iptables route by domains? For example, I have a webserver and my
firewall with iptables route all request on port 80 throw IP webserver. I
need add another webserver, and various domains (www.dom1.com, www.dom2.com)
will be redirect to webserver-1 and other domains (www.dom3.com,
www.dom4.com) will be redirect to webserver-2. Can IPTables help me? Which
is the solution)
Thanks and sorry ... my english is very poor.
José Antonio García García
Technical Internet Solutions
E-GIM +34 952700010
http://www.e-gim.es
^ permalink raw reply
* 2.5.51-mm2
From: Andrew Morton @ 2002-12-12 9:03 UTC (permalink / raw)
To: lkml, linux-mm
url: http://www.zip.com.au/~akpm/linux/patches/2.5/2.5.51/2.5.51-mm2/
-> 2.5.51-mm2-shpte.gz For Dave
-> 2.5.51-mm2.gz Full series
Numerous fixes, and dcache_rcu has been resurrected.
Additions since 2.5.51-mm1:
+PF_MEMALLOC-no-recur.patch
Fix a potential recursion problem in the page allocator
+mempool-atomic-check.patch
A little cleanup
+page-allocator-off-by-one.patch
A little bugfix
+remove-PF_NOWARN.patch
Remove current->flags:PF_NOWARN, use __GFP_NOWARN
+scheduler-tunables.patch
rml's scheduler tweakables. See Documentation/filesystems/proc.txt
+cacheline-aligned-pte_chains.patch
Ensure that pte_chains are cacheline aligned
+ext2-sync-dir-fix.patch
ext2 buglet
+mmap-rounding-fix.patch
mmap corner case
+blocking-kswapd.patch
Make kswapd block against request queues. Fixes some search complexity
problems.
+dcache_rcu-2.patch
+dcache_rcu-3.patch
RCU for dcache locking.
All 67 patches:
kgdb.patch
PF_MEMALLOC-no-recur.patch
Avoid recursion in the page allocator
dio-return-partial-result.patch
aio-direct-io-infrastructure.patch
AIO support for raw/O_DIRECT
deferred-bio-dirtying.patch
bio dirtying infrastructure
aio-direct-io.patch
AIO support for raw/O_DIRECT
aio-dio-debug.patch
dio-reduce-context-switch-rate.patch
Reduced wakeup rate in direct-io code
cputimes_stat.patch
Retore per-cpu time accounting, with a config option
deprecate-bdflush.patch
deprecate use of bdflush()
reduce-random-context-switch-rate.patch
Reduce context switch rate due to the random driver
bcrl-printk.patch
read_zero-speedup.patch
speed up read_zero() for !CONFIG_MMU
nommu-rmap-locking.patch
Fix rmap locking for CONFIG_SWAP=n
semtimedop.patch
semtimedop - semop() with a timeout
writeback-handle-memory-backed.patch
skip memory-backed filesystems in writeback
2-remove-fail_writepage.patch
Remove fail_writepage, redux
wli-show_free_areas.patch
show_free_areas extensions
inlines-net.patch
rbtree-iosched.patch
rbtree-based IO scheduler
deadsched-fix.patch
deadline scheduler fix
quota-smp-locks.patch
Subject: [PATCH] Quota SMP locks
shpte-ng.patch
pagetable sharing for ia32
shpte-nonlinear.patch
shpte: support nonlinear mappings and clean up clear_share_range()
shpte-always-on.patch
Force CONFIG_SHAREPTE=y for ia32
pmd-allocation-fix.patch
make sure all PMDs are allocated under PAE mode
ptrace-flush.patch
Subject: [PATCH] ptrace on 2.5.44
buffer-debug.patch
buffer.c debugging
warn-null-wakeup.patch
pentium-II.patch
Pentium-II support bits
radix-tree-overflow-fix.patch
handle overflows in radix_tree_gang_lookup()
rcu-stats.patch
RCU statistics reporting
auto-unplug.patch
self-unplugging request queues
less-unplugging.patch
Remove most of the blk_run_queues() calls
sync_fs.patch
Add a sync_fs super_block operation
ext3_sync_fs.patch
implement ext3_sync_fs
ext3-fsync-speedup.patch
Clean up ext3_sync_file()
filldir-checks.patch
copy_user checks in filldir()
vmstats-fixes.patch
vm accounting fixes and addition
hugetlb-fixes.patch
hugetlb fixes
writeback-interaction-fix.patch
fs-writeback rework.
scalable-zone-protection.patch
Add /proc/sys/vm/lower_zone_protection
page-wait-table-min-size.patch
Set a minimum hash table size for wait_on_page()
ext3-transaction-reserved-blocks.patch
Reserve an additional transaction block in ext3_dirty_inode
remove-PF_SYNC.patch
dont-inherit-mlockall.patch
Don't inherit mm->def_flags across forks
bootmem-alloc-alignment.patch
bootmem allocator merging fix
ext23_free_blocks-check.patch
ext2/ext3_free_blocks() extra check
blkdev-rlimit.patch
don't allpy file size rlimits to blockdevs
readahead-pinned-memory.patch
limit pinned memory due to readahead
lockless-current_kernel_time.patch
Lockless current_kernel_timer()
remove-vmscan-check.patch
remove a vm debug check
max_sane_readahead.patch
default-super-ops.patch
provide a default super_block_operations
mempool-atomic-check.patch
tidier atomic check in mempool_alloc()
page-allocator-off-by-one.patch
Fix off-by-one in the page allocator
remove-PF_NOWARN.patch
Remove PF_NOWARN
scheduler-tunables.patch
scheduler tunables
cacheline-aligned-pte_chains.patch
pad pte_chains out to a cacheline
ext2-sync-dir-fix.patch
ext2 synchronous mount fix
mmap-rounding-fix.patch
Fix mmap rounding error
blocking-kswapd.patch
Alloc kswapd to block on disk queues
dcache_rcu-2.patch
dcache_rcu-2-2.5.51.patch
dcache_rcu-3.patch
dcache_rcu-3-2.5.51.patch
page-walk-api.patch
page-walk-scsi.patch
page-walk-api-update.patch
pagewalk API update
^ permalink raw reply
* RE: Iptables and various domains
From: Rasmus Reinholdt Nielsen @ 2002-12-12 8:55 UTC (permalink / raw)
To: E-GIM Security, netfilter; +Cc: raymondl
In-Reply-To: <NEBBKLENIBMGHGCLGBPIIEBLCDAA.security@e-gim.es>
Hi
You could use squid proxy server in accelerating mode, see
http://www.zope.org/Members/htrd/howto/squid
and verious other pages, use virtual mode, and it redirects to several
internal webservers based on http header information
/Rasmus
At 09:34 12-12-2002 +0000, E-GIM Security wrote:
>Thanks Raymond:
>
>My domains are virtually hosted. Problems is the next: We have various apps
>in IIS-Windows and ASP technologic. Future developments we need will be
>hosted on Linux with Apache+Tomcat. But, we only use one IP number. Do you
>know another solution?
>
>Thanks a lot
>
> > -----Mensaje original-----
> > De: Raymond Leach [mailto:raymondl@knowledgefactory.co.za]
> > Enviado el: jueves, 12 de diciembre de 2002 8:15
> > Para: E-GIM Security
> > CC: Netfilter Mailing List
> > Asunto: Re: Iptables and various domains
> >
> >
> > Hi
> >
> > Yes and maybe no. If your domains are virtually hosted (they resolve to
> > the same ip numbers) then no. iptables cannot redirect traffic in this
> > case - it uses ip numbers. You would need to use something like Apache
> > virtual hosting and possibly redirect pages to accomplish your goal in
> > this case.
> >
> > If your domains resolve to different ip numbers, then iptables can be
> > your solution:
> >
> > iptables -t nat -A PREROUTING -d www.dom1.com -p tcp --dport 80 -j
> > REDIRECT --to-destination webserver-1:80
> > iptables -t nat -A PREROUTING -d www.dom2.com -p tcp --dport 80 -j
> > REDIRECT --to-destination webserver-1:80
> > iptables -t nat -A PREROUTING -d www.dom3.com -p tcp --dport 80 -j
> > REDIRECT --to-destination webserver-2:80
> > iptables -t nat -A PREROUTING -d www.dom4.com -p tcp --dport 80 -j
> > REDIRECT --to-destination webserver-2:80
> >
> > Remember, to use iptables like above, www.dom1.com, www.dom2.com,
> > www.dom3.com, www.dom4.com must resolve to different ip numbers.
> >
> > Ray
> >
> >
> > On Thu, 2002-12-12 at 10:58, E-GIM Security wrote:
> > > Hi,
> > >
> > > Can Iptables route by domains? For example, I have a
> > webserver and my
> > > firewall with iptables route all request on port 80 throw IP
> > webserver. I
> > > need add another webserver, and various domains (www.dom1.com,
>www.dom2.com)
> > will be redirect to webserver-1 and other domains (www.dom3.com,
> > www.dom4.com) will be redirect to webserver-2. Can IPTables help me? Which
> > is the solution)
> >
> > Thanks and sorry ... my english is very poor.
> >
> > José Antonio García García
> > Technical Internet Solutions
> >
> > E-GIM +34 952700010
> > http://www.e-gim.es
> >
>--
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>( Raymond Leach )
> ) Knowledge Factory (
>( )
> ) Tel: +27 11 445 8100 (
>( Fax: +27 11 445 8101 )
> ) (
>( http://www.knowledgefactory.co.za/ )
> ) http://www.saptg.co.za/ (
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> o o
> o o
> .--. .--.
> | o_o| |o_o |
> | \_:| |:_/ |
> / / \\ // \ \
> ( | |) (| | )
> /`\_ _/'\ /'\_ _/`\
> \___)=(___/ \___)=(___/
^ permalink raw reply
* RE: Iptables and various domains
From: Raymond Leach @ 2002-12-12 8:52 UTC (permalink / raw)
To: E-GIM Security; +Cc: Netfilter Mailing List
In-Reply-To: <NEBBKLENIBMGHGCLGBPIIEBLCDAA.security@e-gim.es>
[-- Attachment #1: Type: text/plain, Size: 4171 bytes --]
On Thu, 2002-12-12 at 11:34, E-GIM Security wrote:
> Thanks Raymond:
>
> My domains are virtually hosted. Problems is the next: We have various apps
> in IIS-Windows and ASP technologic. Future developments we need will be
> hosted on Linux with Apache+Tomcat. But, we only use one IP number. Do you
> know another solution?
>
I don't understand the question. You cannot host two physically seperate
machines with one ip (AFAIK). iptables does not have the capability to
look inside http headers (maybe with an iptbles module ...)
Ray
> Thanks a lot
>
> > -----Mensaje original-----
> > De: Raymond Leach [mailto:raymondl@knowledgefactory.co.za]
> > Enviado el: jueves, 12 de diciembre de 2002 8:15
> > Para: E-GIM Security
> > CC: Netfilter Mailing List
> > Asunto: Re: Iptables and various domains
> >
> >
> > Hi
> >
> > Yes and maybe no. If your domains are virtually hosted (they resolve to
> > the same ip numbers) then no. iptables cannot redirect traffic in this
> > case - it uses ip numbers. You would need to use something like Apache
> > virtual hosting and possibly redirect pages to accomplish your goal in
> > this case.
> >
> > If your domains resolve to different ip numbers, then iptables can be
> > your solution:
> >
> > iptables -t nat -A PREROUTING -d www.dom1.com -p tcp --dport 80 -j
> > REDIRECT --to-destination webserver-1:80
> > iptables -t nat -A PREROUTING -d www.dom2.com -p tcp --dport 80 -j
> > REDIRECT --to-destination webserver-1:80
> > iptables -t nat -A PREROUTING -d www.dom3.com -p tcp --dport 80 -j
> > REDIRECT --to-destination webserver-2:80
> > iptables -t nat -A PREROUTING -d www.dom4.com -p tcp --dport 80 -j
> > REDIRECT --to-destination webserver-2:80
> >
> > Remember, to use iptables like above, www.dom1.com, www.dom2.com,
> > www.dom3.com, www.dom4.com must resolve to different ip numbers.
> >
> > Ray
> >
> >
> > On Thu, 2002-12-12 at 10:58, E-GIM Security wrote:
> > > Hi,
> > >
> > > Can Iptables route by domains? For example, I have a
> > webserver and my
> > > firewall with iptables route all request on port 80 throw IP
> > webserver. I
> > > need add another webserver, and various domains (www.dom1.com,
> www.dom2.com)
> > will be redirect to webserver-1 and other domains (www.dom3.com,
> > www.dom4.com) will be redirect to webserver-2. Can IPTables help me? Which
> > is the solution)
> >
> > Thanks and sorry ... my english is very poor.
> >
> > José Antonio García García
> > Technical Internet Solutions
> >
> > E-GIM +34 952700010
> > http://www.e-gim.es
> >
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> ( Raymond Leach )
> ) Knowledge Factory (
> ( )
> ) Tel: +27 11 445 8100 (
> ( Fax: +27 11 445 8101 )
> ) (
> ( http://www.knowledgefactory.co.za/ )
> ) http://www.saptg.co.za/ (
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> o o
> o o
> .--. .--.
> | o_o| |o_o |
> | \_:| |:_/ |
> / / \\ // \ \
> ( | |) (| | )
> /`\_ _/'\ /'\_ _/`\
> \___)=(___/ \___)=(___/
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
( Raymond Leach )
) Knowledge Factory (
( )
) Tel: +27 11 445 8100 (
( Fax: +27 11 445 8101 )
) (
( http://www.knowledgefactory.co.za/ )
) http://www.saptg.co.za/ (
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
o o
o o
.--. .--.
| o_o| |o_o |
| \_:| |:_/ |
/ / \\ // \ \
( | |) (| | )
/`\_ _/'\ /'\_ _/`\
\___)=(___/ \___)=(___/
[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply
* RE: portfw on iptables 2.4 kernel problem.
From: Rasmus Reinholdt Nielsen @ 2002-12-12 8:51 UTC (permalink / raw)
To: Reckhard, Tobias, netfilter
In-Reply-To: <96C102324EF9D411A49500306E06C8D1021AE462@eketsv02.cubis.de >
Hi
I have the same problem here. Using kernel 2.4.19-pre9, where I just can't
forward port 80. Port 8080 works for instace fine. I have also tried to
redirect all requests on port 80 to port 8080, but without any luck. When
connecting to port 80 the browser just hangs. I can see in the apache log
on the webserver that it gets the request, so I think it is a problem of
the packets not getting back through the firewall and to the browser.
I just can't see what is wrong. I even tried the following rules to see it
that would help, but it didn't
iptables -A INPUT -j ACCEPT
iptables -A FORWARD -j ACCEPT
iptables -t nat -A POSTROUTING -j MASQUERADE
iptables -t nat -A PREROUTING -p tcp -i eth1 --dport 80 -j DNAT --to
<http_ip>:80
echo 1 > /proc/sys/net/ipv4/ip_forward
This is not my usual firewall script, but I can't think of a more open one :)
Anybody knows of this might be a problem with the 2.4.19 kernels, I have a
2.4.18 firewall as well on which forwarding IS working, with the same ruleset.
thanks
/Rasmus
At 09:09 12-12-2002 +0100, Reckhard, Tobias wrote:
>Following up to myself...
>
> > Then that's where our impression differs. I have thought up
> > to now that
> > INPUT is hit before PREROUTING before FORWARD before
> > POSTROUTING before
> > OUTPUT. And that a packet may stop being processed between
> > PREROUTING and
> > FORWARD as well as between POSTROUTING and OUTPUT.
> >
> > I may check the one NATing firewall I have running.. later.
>
>I just did check that machine and you're right, I was wrong. So INPUT and
>OUTPUT rules shouldn't be required in the case we're discussing.
>
>Cheers,
>Tobias
^ permalink raw reply
* Re: [Dri-devel] Re: 2.4.20 AGP for I845 wrong ?
From: Nicolas ASPERT @ 2002-12-12 8:57 UTC (permalink / raw)
To: David Dawes; +Cc: Margit Schubert-While, linux-kernel, davej, faith, dri-devel
In-Reply-To: <20021211205854.A7654@xfree86.org>
David Dawes wrote:
>
> No, I think it should be intel_845_setup too, since the 845G docs on
> Intel's public web site show that the behaviour is like the 845 when
> the on-board graphics isn't enabled. I made that change in my
> locally maintained version of the agpgart driver a little while ago,
> but haven't had the opportunity to test it with an external AGP card
> in an 845G box yet.
Damn, you're right. Now I got the docs from Intel (at the time were the
patch to support 845g was submitted, they were just not available yet),
and truly the specs are closer to the 845, so let's switch to
'intel_845_setup' to initialize the 845g. Not that it should change
things too much, but it will avoid further confusions....
Best regards.
Nicolas
PS: I hope the IBM annoyances for mails sent to lkml stopped...
--
Nicolas Aspert Signal Processing Institute (ITS)
Swiss Federal Institute of Technology (EPFL)
^ permalink raw reply
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.