* Re: observations on 2.5 config screens
From: Bill Davidsen @ 2003-01-09 16:12 UTC (permalink / raw)
To: Dave Jones
Cc: Robert Love, Adrian Bunk, Robert P. J. Day,
Linux kernel mailing list
In-Reply-To: <20030109125007.GA17045@codemonkey.org.uk>
On Thu, 9 Jan 2003, Dave Jones wrote:
> On Wed, Jan 08, 2003 at 05:49:54PM -0500, Bill Davidsen wrote:
> > > SMP isn't a processor option ?
> > Clearly not, it's not processor dependent or even architecture dependent
>
> Of course its arch dependant. Some of the archs we support don't do SMP.
> See m68k for one. Sure there may be some boards out there with >1 68k
> welded to them, but Linux doesn't run on them.
Exactly, that's not a characteristic of the CPU, it's a system board thing
and support is really a low level kernel option.
> > generally. It's a characteristic of the os, unlike microcode, mtrr, and
> > other stuff not on some architectures.
>
> Absolute nonsense. These are _cpu_ features. If you dispute this,
> you have no understanding of what you talking about.
No, you missed what I was talking about... reread the above, I said SMP
was an os feature *unlike* mtrr, etc.
> > You can select it for 386/486/P5
> > (and it works in 2.4 at least, for P5, have several).
>
> And thats perfectly valid. Although I've not seen an MP compliant
> 386/486 personally, there were patches I beleive at one time for
> some of the strange 486 implementations.
>
> It's also a valid thing to do to do for code coverage reasons.
> Although I doubt anyones testing SMP builds on a 386/486 any more.
>
> > I would think that processor options would select the processor and any
> > options which are specific to it rather than generally supported. Serial
> > numbers, firmware loads, that sort of feature.
>
> serial number stuff is done at run time. Firmware loads. Well, you
> mentioned above that microcode wasn't a CPU feature, now you change
> your mind ?
>
> > Preempt and smp, are general, I guess not supported on every possible
> > hardware
>
> Again, more contradiction. Above you said of SMP:
> "Clearly not, it's not processor dependent or even architecture dependent"
> Now you're saying it is arch dependant.
In general by architecture dependent I meant "specific to one
architecture" or even one processor. HT is only on one type of CPU, mtrr
is on one family of CPUs, etc. As opposed to SMP, which is possible on any
of the supported CPUs, even if there isn't a Linux supported example of
it. There was even a board mounting two AMD Socket7 CPUs with a bunch of
glue which ran some BSD variant (no VM, I assume).
I don't mind you disagreeing with me, I'd appreciate it if you would stop
misreading what I said and then claiming I don't know I'm talking about.
--
bill davidsen <davidsen@tmr.com>
CTO, TMR Associates, Inc
Doing interesting things with little computers since 1979.
^ permalink raw reply
* Help! AMD Config Advice
From: Frank R Callaghan @ 2003-01-09 16:46 UTC (permalink / raw)
To: LinuxMTD
Is there no solution to this question ?
am I asking the wronge group ?
is it so stupid it does not deserve a responce ?
---------- Forwarded Message ----------
Subject: AMD Config Advice
Date: Thu, 19 Dec 2002 15:31:19 -0500
From: Frank R Callaghan <f.callaghan@ieee.org>
To: LinuxMTD <linux-mtd@lists.infradead.org>
Hi,
I undrstand this may be a very basic question, but here go's
I am looking to use an AMD flash chip on my pc104 card
to store some non-volatile data, the chip is a 2MB part AMD29F016,
the BIOS is in the top 128KB of the first mega-byte(do not want to
overwrite).
After setting up the kernel with MDT I get
cat /proc/mtd
dev: size erasesize name
mtd0: 00200000 00010000 "Physically mapped flash"
ok but I only need the second 1MB - is there some way to
prevent the first meg being mapped/used ?
Kernal Version 2.4.19 with:
#
# Memory Technology Devices (MTD)
#
CONFIG_MTD=y
CONFIG_MTD_DEBUG=y
CONFIG_MTD_DEBUG_VERBOSE=3
# CONFIG_MTD_PARTITIONS is not set
# CONFIG_MTD_CONCAT is not set
# CONFIG_MTD_REDBOOT_PARTS is not set
# CONFIG_MTD_CHAR is not set
CONFIG_MTD_BLOCK=y
CONFIG_FTL=y
# CONFIG_NFTL is not set
#
# RAM/ROM/Flash chip drivers
#
CONFIG_MTD_CFI=y
CONFIG_MTD_JEDECPROBE=y
CONFIG_MTD_GEN_PROBE=y
# CONFIG_MTD_CFI_ADV_OPTIONS is not set
# CONFIG_MTD_CFI_INTELEXT is not set
CONFIG_MTD_CFI_AMDSTD=y
# CONFIG_MTD_RAM is not set
# CONFIG_MTD_ROM is not set
# CONFIG_MTD_ABSENT is not set
# CONFIG_MTD_OBSOLETE_CHIPS is not set
# CONFIG_MTD_AMDSTD is not set
# CONFIG_MTD_SHARP is not set
# CONFIG_MTD_JEDEC is not set
#
# Mapping drivers for chip access
#
CONFIG_MTD_PHYSMAP=y
CONFIG_MTD_PHYSMAP_START=9500000 <- My phy addr of second MB
CONFIG_MTD_PHYSMAP_LEN=100000 <-- 1MB
CONFIG_MTD_PHYSMAP_BUSWIDTH=1
# CONFIG_MTD_PNC2000 is not set
# CONFIG_MTD_SC520CDP is not set
# CONFIG_MTD_NETSC520 is not set
# CONFIG_MTD_SBC_GXX is not set
# CONFIG_MTD_ELAN_104NC is not set
# CONFIG_MTD_DILNETPC is not set
# CONFIG_MTD_MIXMEM is not set
# CONFIG_MTD_OCTAGON is not set
# CONFIG_MTD_VMAX is not set
# CONFIG_MTD_L440GX is not set
# CONFIG_MTD_AMD766ROM is not set
# CONFIG_MTD_ICH2ROM is not set
# CONFIG_MTD_PCI is not set
#
# Self-contained MTD device drivers
#
# CONFIG_MTD_PMC551 is not set
# CONFIG_MTD_SLRAM is not set
# CONFIG_MTD_MTDRAM is not set
# CONFIG_MTD_BLKMTD is not set
# CONFIG_MTD_DOC1000 is not set
# CONFIG_MTD_DOC2000 is not set
# CONFIG_MTD_DOC2001 is not set
# CONFIG_MTD_DOCPROBE is not set
also I'm looking to use jffs2 as the file system - maybe I can partion it
to only use the second meg ???
TIA,
Frank.
______________________________________________________
Linux MTD discussion mailing list
http://lists.infradead.org/mailman/listinfo/linux-mtd/
-------------------------------------------------------
^ permalink raw reply
* Re: [2.5 patch] correct help text for LOG_BUF_SHIFT
From: Randy.Dunlap @ 2003-01-09 16:20 UTC (permalink / raw)
To: Adrian Bunk; +Cc: Geert Uytterhoeven, Andrew Morton, Kernel Mailing List
In-Reply-To: <20030109121132.GP6626@fs.tum.de>
On Thu, 9 Jan 2003, Adrian Bunk wrote:
| On Thu, Jan 09, 2003 at 12:04:46PM +0100, Geert Uytterhoeven wrote:
| > On Wed, 8 Jan 2003, Linus Torvalds wrote:
| > > Andrew Morton <akpm@digeo.com>:
| > > o move LOG_BUF_SIZE to header/config
| >
| > I find the config a bit confusing:
| >
| > | Kernel log buffer size (128 KB, 64 KB, 32 KB, 16 KB, 8 KB, 4 KB) [16 KB] (NEW) ?
| > | Select kernel log buffer size from this list (power of 2).
| > | Defaults: 17 (=> 128 KB for S/390)
| > | 16 (=> 64 KB for x86 NUMAQ or IA-64)
| > | 15 (=> 32 KB for SMP)
| > | 14 (=> 16 KB for uniprocessor)
| > |
| > | Kernel log buffer size (128 KB, 64 KB, 32 KB, 16 KB, 8 KB, 4 KB) [16 KB] (NEW)
| >
| > E.g. should I enter `14' or `16 KB' (or `16') for `16 KB'?
Sorry about that.
| After reading init/Kconfig it seems the following was intended:
|
| --- linux-2.5.55/init/Kconfig.old 2003-01-09 13:06:43.000000000 +0100
| +++ linux-2.5.55/init/Kconfig 2003-01-09 13:08:44.000000000 +0100
| @@ -89,11 +89,11 @@
| default LOG_BUF_SHIFT_15 if SMP
| default LOG_BUF_SHIFT_14
| help
| - Select kernel log buffer size from this list (power of 2).
| - Defaults: 17 (=> 128 KB for S/390)
| - 16 (=> 64 KB for x86 NUMAQ or IA-64)
| - 15 (=> 32 KB for SMP)
| - 14 (=> 16 KB for uniprocessor)
| + Select kernel log buffer size from this list.
| + Defaults: 128 KB for S/390
| + 64 KB for x86 NUMAQ or IA-64
| + 32 KB for SMP
| + 16 KB for uniprocessor
|
| config LOG_BUF_SHIFT_17
| bool "128 KB"
I'd prefer the change that I sent Monday and is appended below.
It only asks for a shift value, and only if DEBUG_KERNEL is enabled,
like Linus asked for.
--
~Randy
--- ./init/Kconfig%LGBUF Mon Jan 6 16:01:55 2003
+++ ./init/Kconfig Mon Jan 6 16:38:35 2003
@@ -82,50 +82,21 @@
building a kernel for install/rescue disks or your system is very
limited in memory.
-choice
- prompt "Kernel log buffer size"
- default LOG_BUF_SHIFT_17 if ARCH_S390
- default LOG_BUF_SHIFT_16 if X86_NUMAQ || IA64
- default LOG_BUF_SHIFT_15 if SMP
- default LOG_BUF_SHIFT_14
- help
- Select kernel log buffer size from this list (power of 2).
- Defaults: 17 (=> 128 KB for S/390)
- 16 (=> 64 KB for x86 NUMAQ or IA-64)
- 15 (=> 32 KB for SMP)
- 14 (=> 16 KB for uniprocessor)
-
-config LOG_BUF_SHIFT_17
- bool "128 KB"
- default y if ARCH_S390
-
-config LOG_BUF_SHIFT_16
- bool "64 KB"
- default y if X86_NUMAQ || IA64
-
-config LOG_BUF_SHIFT_15
- bool "32 KB"
- default y if SMP
-
-config LOG_BUF_SHIFT_14
- bool "16 KB"
-
-config LOG_BUF_SHIFT_13
- bool "8 KB"
-
-config LOG_BUF_SHIFT_12
- bool "4 KB"
-
-endchoice
-
config LOG_BUF_SHIFT
- int
- default 17 if LOG_BUF_SHIFT_17=y
- default 16 if LOG_BUF_SHIFT_16=y
- default 15 if LOG_BUF_SHIFT_15=y
- default 14 if LOG_BUF_SHIFT_14=y
- default 13 if LOG_BUF_SHIFT_13=y
- default 12 if LOG_BUF_SHIFT_12=y
+ int "Kernel log buffer size" if DEBUG_KERNEL
+ default 17 if ARCH_S390
+ default 16 if X86_NUMAQ || IA64
+ default 15 if SMP
+ default 14
+ help
+ Select kernel log buffer size as a power of 2.
+ Defaults and Examples:
+ 17 => 128 KB for S/390
+ 16 => 64 KB for x86 NUMAQ or IA-64
+ 15 => 32 KB for SMP
+ 14 => 16 KB for uniprocessor
+ 13 => 8 KB
+ 12 => 4 KB
endmenu
^ permalink raw reply
* Re: [2.5] IRQ distribution in the 2.5.52 kernel
From: Andrew Theurer @ 2003-01-09 16:10 UTC (permalink / raw)
To: Kamble, Nitin A, linux-kernel
Cc: Saxena, Sunil, Mallick, Asit K, Nakajima, Jun
In-Reply-To: <E88224AA79D2744187E7854CA8D9131DA5CE51@fmsmsx407.fm.intel.com>
On Tuesday 07 January 2003 20:50, Kamble, Nitin A wrote:
> Hello All,
>
> We were looking at the performance impact of the IRQ routing from
> the 2.5.52 Linux kernel. This email includes some of our findings
> about the way the interrupts are getting moved in the 2.5.52 kernel.
> Also there is discussion and a patch for a new implementation. Let
> me know what you think at nitin.a.kamble@intel.com
Nitin,
I got a chance to run the NetBench benchmark with your patch on 2.5.54-mjb2
kernel. NetBench measures SMB/CIFS performance by using several SMB clients
(in this case 44 Windows 2000 systems), sending SMB requests to a Linux
server running Samba 2.2.3a+sendfile. Result is in throughput, Mbps.
Generally the network traffic on the server is 60% recv, 40% tx.
I believe we have very similar systems. Mine is a 4 x 1.6 GHz, 1 MB L3 P4
Xeon with 4 GB DDR memory (3.2 GB/sec I believe). The chipset is "Summit".
I also have more than one Intel e1000 adapters.
I decided to run a few configurations, first with just one adapter, with and
without HT support in the kernel (acpi=off), then add another adapter and
test again with/without HT.
Here are the results:
4P, no HT, 1 x e1000, no kirq: 1214 Mbps, 4% idle
4P, no HT, 1 x e1000, kirq: 1223 Mbps, 4% idle, +0.74%
I suppose we didn't see much of an improvement here because we never run into
the situation where more than one interrupt with a high rate is routed to a
single CPU on irq_balance.
4P, HT, 1 x e1000, no kirq: 1214 Mbps, 25% idle
4P, HT, 1 x e1000, kirq: 1220 Mbps, 30% idle, +0.49%
Again, not much of a difference just yet, but lots of idle time. We may have
reached the limit at which one logical CPU can process interrupts for an
e1000 adapter. There are other things I can probably do to help this, like
int delay, and NAPI, which I will get to eventually.
4P, HT, 2 x e1000, no kirq: 1269 Mbps, 23% idle
4P, HT, 2 x e1000, kirq: 1329 Mbps, 18% idle +4.7%
OK, almost 5% better! Probably has to do with a couple of things; the fact
that your code does not route two different interrupts to the same
core/different logical cpus (quite obvious by looking at /proc/interrupts),
and that more than one interrupt does not go to the same cpu if possible. I
suspect irq_balance did some of those [bad] things some of the time, and we
observed a bottleneck in int processing that was lower than with kirq.
I don't think all of the idle time is because of a int processing bottleneck.
I'm just not sure what it is yet :) Hopefully something will become obvious
to me...
Overall I like the way it works, and I believe it can be tweaked to work with
NUMA when necessary. I hope to have access to a specweb system on a NUMA box
soon, so we can verify that.
-Andrew Theurer
^ permalink raw reply
* Re: OT: Which Gigabit ethernet card?
From: Bill Davidsen @ 2003-01-09 16:15 UTC (permalink / raw)
To: Filip djMedrzec Zyzniewski; +Cc: Linux-Kernel Mailing List
In-Reply-To: <20021231084740.GA2680@ekatalog.com.pl>
On Tue, 31 Dec 2002, Filip djMedrzec Zyzniewski wrote:
> On Mon, Dec 30, 2002 at 09:22:54PM -0500, Bill Davidsen wrote:
>
> > I would hope a decent cable tester would test for effects at useful
> > frequency. The frequency of a battery is too low to reveal some problems.
>
> "Frequency of a baterry"? What the hell is that? Baterry provides direct
> current, not alternating one... Tester provides it's own testing signals.
Clearly I need to add a smiley for the humour-impared.
The original post you clipped implied that all you needed was a pair of
RJ45 sockets and a battery, which would do continuity testing only.
--
bill davidsen <davidsen@tmr.com>
CTO, TMR Associates, Inc
Doing interesting things with little computers since 1979.
^ permalink raw reply
* Re: What's in a name?
From: Richard B. Johnson @ 2003-01-09 16:11 UTC (permalink / raw)
To: vlad; +Cc: 'John Alvord', linux-kernel, rms
In-Reply-To: <012201c2b7f2$5ffd4e40$0200a8c0@wsl3>
On Thu, 9 Jan 2003, Vlad@Vlad.geekizoid.com wrote:
> And in that same period, look at Linux, and then look at Hurd. Hurd even
> has the advantage of using giant chunks of Linux code, but it still is
> basically useless.
>
> Why should Linux be refered to as GNU/Linux because of tools, and yet Hurd
> doesn't give credit where credit is due? RMS has done more to hurt GNU with
> his current stance on the matter than Microsoft ever could. He's getting
> annoying, too.
>
> Regards,
> Scott
>
Damn. This is getting tried and it doesn't seem to "go away".
Anybody remember this Copyright notice?? Most ALL of the
early Linux Distributions contained programs with this
notice:
/*
* Copyright (c) 1983 Regents of the University of California.
* All rights reserved.
*
* Redistribution and use in source and binary forms are permitted
* provided that the above copyright notice and this paragraph are
* duplicated in all such forms and that any documentation,
* advertising materials, and other materials related to such
* distribution and use acknowledge that the software was developed
* by the University of California, Berkeley. The name of the
* University may not be used to endorse or promote products derived
* from this software without specific prior written permission.
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
* IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
* WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
*/
#ifndef lint
char copyright[] =
"@(#) Copyright (c) 1983 Regents of the University of California.\n\
All rights reserved.\n";
#endif /* not lint */
...however. Something happened so that this code was lifted
"whole cloth" into some later distributions that contained
the GNU License notice. By some unknown mystery, the embeded
copyright notice was eliminated as well. However, much of the
code remained the same. In some little-used programs, all the
code, including the bug, remained the same.
If I had anything to do with so-called GNU, I'd keep my mouth
shut so this wholesale appropriation of intellectual property
was not investigated.
Here is an early distribution of Linux:
Script started on Thu Jan 9 10:55:02 2003
# cd /usr/bin
# strings * | grep Regents
@(#) Copyright (c) 1980 Regents of the University of California.
@(#) Copyright (c) 1980 The Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1990 The Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1980 Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1989 The Regents of the University of California.
@(#) Copyright (c) 1990 The Regents of the University of California.
@(#) Copyright (c) 1990 The Regents of the University of California.
@(#) Copyright (c) 1985, 1989 Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
Based on BSD gprof, copyright 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
@(#) Copyright (c) 1986 Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983, 1989 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1992, 1993, 1994, 1995 by NCEMRSoft and Copyright (c) 1985, 1989 Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1985,1989 Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1985, 1989 Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1983, 1990 The Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1993 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1987, 1992 The Regents of the University of California.
@(#) Copyright (c) 1983, 1990 The Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1983, 1990 The Regents of the University of California.
@(#) Copyright (c) 1983 The Regents of the University of California.
@(#) Copyright (c) 1988 Regents of the University of California.
@(#) Copyright (c) 1983 The Regents of the University of California.
@(#) Copyright (c) 1980 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1991 The Regents of the University of California.
@(#) Copyright (c) 1988, 1990 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1980, 1991 The Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
# strings * | grep Regents
@(#) Copyright (c) 1980 Regents of the University of California.
@(#) Copyright (c) 1980 The Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1990 The Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1980 Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1989 The Regents of the University of California.
@(#) Copyright (c) 1990 The Regents of the University of California.
@(#) Copyright (c) 1990 The Regents of the University of California.
@(#) Copyright (c) 1985, 1989 Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
Based on BSD gprof, copyright 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
@(#) Copyright (c) 1986 Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983, 1989 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1992, 1993, 1994, 1995 by NCEMRSoft and Copyright (c) 1985, 1989 Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1985,1989 Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1985, 1989 Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1983, 1990 The Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1993 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
@(#) Copyright (c) 1983 Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1987, 1992 The Regents of the University of California.
@(#) Copyright (c) 1983, 1990 The Regents of the University of California.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1983, 1990 The Regents of the University
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
@(#) Copyright (c) 1980 The Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
# cd /bin
# strings * | grep Regents
@(#) Copyright (c) 1991 The Regents of the University of California.
@(#) Copyright (c) 1991 The Regents of the University of California.
@(#) Copyright (c) 1980, 1987, 1988 The Regents of the University of California.
@(#) Copyright (c) 1980 Regents of the University of California.
@(#) Copyright (c) 1980 Regents of the University of California.
@(#) Copyright (c) 1980 The Regents of the University of California.
@(#) Copyright (c) 1989 The Regents of the University of California.
@(#) Copyright (c) 1991 The Regents of the University of California.
# cd /sbin
# strings * | grep Regents
strings: control: No such file or directory
strings: discard: No such file or directory
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
The Regents of the University of California. All rights reserved.
strings: server: No such file or directory
The Regents of the University of California. All rights reserved.
strings: sysinit: No such file or directory
# exit
Script done on Thu Jan 9 10:57:53 2003
So much for the absolute bullshit that GNU started Linux and that
there is somehow a GNU/Linux. Most all of the early distributions
used programs ported from BSD. The Linux-BSD emulation was so good,
thanks to Linus and others, that most programs needed to only be
recompiled.
That, ladies and gentlemen, is the true history of the "Linux Operating
System" with all of the components that RMS insists are his, actually
coming from the University of California, Berkeley.
Don't be bambozzled by the persons who will re-write history to glorify
their accomplishments. Saying something over-and-over again doesn't
make it true. Facts stand alone. They only need to be noted. Bullshit
needs repeating.
Cheers,
Dick Johnson
Penguin : Linux version 2.4.18 on an i686 machine (797.90 BogoMips).
Why is the government concerned about the lunatic fringe? Think about it.
^ permalink raw reply
* Re: kswapd CPU usage and heavy disk IO
From: Brian Tinsley @ 2003-01-09 16:02 UTC (permalink / raw)
To: Russell Coker; +Cc: ReiserFS, Rik van Riel
In-Reply-To: <200301091431.54451.russell@coker.com.au>
I've been seeing the exact same thing on the same type of system in the
same situations. This has been causing all kinds of problems on our
clusters: the system live-locks for a minute or two, causes cluster
heartbeats to not be received, and falsely fails over when the system
recovers from the live-lock. The only thing I can find after the
live-lock is that the runtime for kswapd is abnormally high.
We started running sar (60 second collection interval) and were able to
capture some stats during this live-lock period. I've snipped some I
believe may be of interest. Note the missing stats between 03:59:43 and
04:02:03
Oh BTW, this is on a stock 2.4.20 kernel (dual P3, 4GB), but I have seen
the same behavior on 2.4.19 and 2.4.17.
1. sar -f sa09 -r
03:53:43 AM kbmemfree kbmemused %memused kbmemshrd kbbuffers kbcached
kbswpfree kbswpused %swpused
03:54:43 AM 411888 3888264 90.42 0 629520
2666968 209713
6 0 0.00
03:55:43 AM 396684 3903468 90.78 0 658656
2667160 209713
6 0 0.00
03:56:43 AM 331360 3968792 92.29 0 675008
2733476 209713
6 0 0.00
03:57:43 AM 231588 4068564 94.61 0 683680
2832816 209713
6 0 0.00
03:58:43 AM 209740 4090412 95.12 0 702148
2854332 209713
6 0 0.00
03:59:43 AM 211016 4089136 95.09 0 712580
2854508 209713
6 0 0.00
04:02:03 AM 207828 4092324 95.17 0 715180
2854596 209713
6 0 0.00
04:04:30 AM 2581956 1718196 39.96 0 662320
874536 209713
6 0 0.00
04:05:30 AM 4013000 287152 6.68 0 27012
84084 209713
6 0 0.00
2. sar -f sa09 -R
03:53:43 AM frmpg/s shmpg/s bufpg/s campg/s
03:54:43 AM -263.02 0.00 91.67 299.50
03:55:43 AM -63.35 0.00 121.40 0.80
03:56:43 AM -272.18 0.00 68.13 276.32
03:57:43 AM -415.72 0.00 36.13 413.92
03:58:43 AM -91.03 0.00 76.95 89.65
03:59:43 AM 5.32 0.00 43.47 0.73
04:02:03 AM -4.74 0.00 3.86 0.13
04:04:30 AM 5013.36 0.00 -111.62 -4181.22
04:05:30 AM 5962.68 0.00 -2647.12 -3293.55
04:06:30 AM -8.10 0.00 0.02 6.50
3. sar -f sa09 -b
03:53:43 AM tps rtps wtps bread/s bwrtn/s
03:54:43 AM 161.52 156.32 5.20 3156.67 119.60
03:55:43 AM 148.37 129.35 19.02 1034.80 377.33
03:56:43 AM 146.32 128.48 17.83 2732.80 360.40
03:57:43 AM 107.32 84.62 22.70 3743.60 447.07
03:58:43 AM 91.73 82.03 9.70 1312.40 194.80
03:59:43 AM 75.62 54.22 21.40 433.73 350.00
04:02:03 AM 4.97 4.83 0.14 38.65 1.24
04:04:30 AM 82.68 9.44 73.24 78.45 958.39
04:05:30 AM 2.93 0.00 2.93 0.00 29.33
04:06:30 AM 0.22 0.00 0.22 0.00 1.73
4. sar -f sa09 -i
03:53:43 AM dentunusd file-sz %file-sz inode-sz super-sz %super-sz
dquot-sz %dquot-sz rtsig-sz %rtsig-sz
03:54:43 AM 57361 134 0.01 61318 0 0.00
0 0.00 0 0.00
03:55:43 AM 58318 124 0.01 62006 0 0.00
0 0.00 0 0.00
03:56:43 AM 44384 135 0.01 47145 0 0.00
0 0.00 0 0.00
03:57:43 AM 42565 135 0.01 45983 0 0.00
0 0.00 0 0.00
03:58:43 AM 18901 134 0.01 22408 0 0.00
0 0.00 0 0.00
03:59:43 AM 607 135 0.01 1173 0 0.00
0 0.00 0 0.00
04:02:03 AM 4294967295 113 0.01 417 0
0.00 0 0.00 4 0.39
04:04:30 AM 49 247 0.02 6316 0 0.00
0 0.00 0 0.00
04:05:30 AM 121 311 0.03 365 0 0.00
0 0.00 0 0.00
5. sar -f sa09 -u
03:53:43 AM CPU %user %nice %system %idle
03:54:43 AM all 7.52 0.00 25.15 67.33
03:55:43 AM all 8.97 0.00 25.28 65.75
03:56:43 AM all 6.07 0.00 23.82 70.11
03:57:43 AM all 5.08 0.00 23.54 71.38
03:58:43 AM all 6.77 0.00 22.88 70.36
03:59:43 AM all 7.18 0.00 25.82 67.00
04:02:03 AM all 0.77 0.00 96.32 2.91
04:04:30 AM all 4.20 0.00 95.11 0.69
04:05:30 AM all 1.88 0.00 5.29 92.83
04:06:30 AM all 2.01 0.00 2.81 95.18
Russell Coker wrote:
>I have a server with 4G of RAM running ReiserFS for everything that matters.
>
>It has 2G of swap space free, but so far I have not seen swap usage go above
>1.6M (so in normal use I could turn off swap entirely and expect not to see
>much difference).
>
>When it's under really heavy load (when I have a maintenance task involving a
>"find /" and there are lots of POP/IMAP clients hitting the server as well as
>mail delivery) and the load average gets to about 40, the "kswapd" kernel
>thread starts using excessive CPU time. It will stay on ~4% but have spikes
>of up to 45%!!! This is a two-processor machine so 45% CPU reported by top
>means 90% of a single CPU I guess. 90% of a 1.8GHz P4 CPU is a lot of CPU
>and I think that something is wrong.
>
>In the meager documentation in the kernel source kswapd is described as being
>involved in paging to disk. I don't think that this is what it is doing as
>there is no noticable paging activity (it generally has at least 600M of
>"buffers" so there is no real shortage of memory).
>
>Would the activity of kswapd be involved with ReiserFS in any way? What can I
>do to improve this situation?
>
>
>
--
-[========================]-
-[ Brian Tinsley ]-
-[ Chief Systems Engineer ]-
-[ Emageon ]-
-[========================]-
^ permalink raw reply
* Re: APIC with SIS
From: Stephan von Krawczynski @ 2003-01-09 16:09 UTC (permalink / raw)
To: Alan Cox; +Cc: linux-kernel
In-Reply-To: <1041268709.13684.28.camel@irongate.swansea.linux.org.uk>
On 30 Dec 2002 17:18:29 +0000
Alan Cox <alan@lxorguk.ukuu.org.uk> wrote:
> On Mon, 2002-12-30 at 16:33, Stephan von Krawczynski wrote:
> > > You need some kernel patches, updated ACPI and ACPI enabled to use the
> > > SIS APIC in this setup
> >
> > Where to find?
>
> Current ACPI is on sourceforge. The SIS APIC workaround bits haven't yet
> been backported to 2.4, so you either do the backport or wait 8)
Ok, so I took ACPI from sf and voila: it works now! I took the patch for 2.4.20
and it does fine. Are there chances to include this in the mainstream? Without
my SIS-based motherboards do not work at all with shared interrupts (which you
actually cannot prevent due to lacking bios support for pci-irq mapping).
BTW: I tried 2.4.21-pre[1-3] and none did work, of course.
--
Regards,
Stephan
^ permalink raw reply
* Belongs to oops with mass storage
From: Chrissie @ 2003-01-09 18:03 UTC (permalink / raw)
To: mdharm-usb, linux-kernel, sjr, eyesee, anti, thomas.hechelhammer
Ok guys, thanks for fast response.
1.) i get the oops also, if i set the processor to 733 Mhz, i just tried
it 5 mins ago.
2.) the ksymoops message here:
(Sorry for the last posting with hex numbers, i am not an experienced
kernel hacker...)
>>EIP; c01261d8 <kfree+2c/b0> <=====
>>eax; 00b00000 Before first symbol
>>edx; c100001c <_end+d18240/1054e224>
>>ebp; ce13be00 <_end+de54024/1054e224>
>>esp; c9c39de0 <_end+9952004/1054e224>
Trace; c01d2b23 <usb_destroy_configuration+3f/1b4>
Trace; d0838e50 <[usb-uhci]uhci_free_dev+28/30>
Trace; c01d202c <usb_free_dev+24/3c>
Trace; d0839852 <[usb-uhci]uhci_interrupt+c6/12c>
Trace; c0107e8d <handle_IRQ_event+31/5c>
Trace; c0107ff6 <do_IRQ+6a/a8>
Trace; c010a1d8 <call_do_IRQ+5/d>
Trace; c011f09b <handle_mm_fault+7f/b0>
Trace; c010eb64 <do_page_fault+160/480>
Trace; c010ea04 <do_page_fault+0/480>
Trace; c011992c <rm_sig_from_queue+14/18>
Trace; c011a904 <do_sigaction+9c/d4>
Trace; c0106cc4 <error_code+34/3c>
Code; c01261d8 <kfree+2c/b0>
00000000 <_EIP>:
Code; c01261d8 <kfree+2c/b0> <=====
0: 2b 59 0c sub 0xc(%ecx),%ebx <=====
Code; c01261db <kfree+2f/b0>
3: 89 d8 mov %ebx,%eax
Code; c01261dd <kfree+31/b0>
5: 31 d2 xor %edx,%edx
Code; c01261df <kfree+33/b0>
7: f7 76 18 divl 0x18(%esi)
Code; c01261e2 <kfree+36/b0>
a: 89 c3 mov %eax,%ebx
Code; c01261e4 <kfree+38/b0>
c: 86 41 14 xchg %al,0x14(%ecx)
Code; c01261e7 <kfree+3b/b0>
f: 89 44 99 18 mov %eax,0x18(%ecx,%ebx,4)
Code; c01261eb <kfree+3f/b0>
13: 89 00 mov %eax,(%eax)
1 warning issued. Results may not be reliable.
Chrissie
x.chrissie.x@t-online.de
^ permalink raw reply
* Re: USB CF reader reboots PC - DEVFS did it
From: Murray J. Root @ 2003-01-09 16:06 UTC (permalink / raw)
To: linux-kernel
In-Reply-To: <20030108165130.GA1181@Master.Wizards>
On Wed, Jan 08, 2003 at 11:51:30AM -0500, Murray J. Root wrote:
> ASUS P4S533 (SiS645DX chipset)
> P4 2GHz
> 1G PC2700 RAM
> SanDisk SDDR-77 ImageMate Dual Card Reader (using only CF cards)
>
> ----------------------------
> devfs compiled in to kernel, devfs=nomount in lilo.conf
>
> Insert CF card. mount it. cd to it, do reads and/or writes
> umount card. remove card.
> insert a different card (does not happen if the same card is used)
> mount it. system reboots. logs are corrupted
>
> Doesn't happen every time for read - sometimes I can read 2 or 3 cards first
> Happens every time for write - if I write to a card then changing cards
> causes a reboot
>
> ----------------------------
> devfs=mount in lilo.conf
>
> Insert CF card.
> ls /dev shows sda and sda1
> mount it.
> ls /dev shows sda - no sda1
> cd to mounted CF card
> process hangs, sd-mod & usb-storage "busy"
> rmmod -f usb-storage or sd-mod causes PC to stop
> (keyboard & mouse unresponsive, wmfire frozen, net disconnects)
>
> reboot
> Insert CF card.
> ls /dev shows sda & sda1
> mount it.
> ls /dev shows sda - no sda1
> umount it
> ls /dev shows sda - no sda1
> modprobe -r sd-mod && modprobe sd-mod
> ls /dev shows sda & sda1
>
New - 2.5.55
No more reboot - just a seg fault when trying to mount a new card
and process hangs if I try again (not surprising).
Removed devfs completely from build - everything works fine.
Can mount, read, write, umount many cards without a problem.
--
Murray J. Root
------------------------------------------------
DISCLAIMER: http://www.goldmark.org/jeff/stupid-disclaimers/
------------------------------------------------
Mandrake on irc.freenode.net:
#mandrake & #mandrake-linux = help for newbies
#mdk-cooker = Mandrake Cooker
#cooker = moderated Mandrake Cooker
^ permalink raw reply
* Re: get_pteptr prototype
From: Hollis Blanchard @ 2003-01-09 15:55 UTC (permalink / raw)
To: David Gibson; +Cc: paulus, devel list
In-Reply-To: <20030109023300.GC6569@zax.zax>
On Wed, 2003-01-08 at 20:33, David Gibson wrote:
>
> Hmm... what's the reason that wakeup_info needs to be reserved in
> head_4xx.S, rather than just being a normal variable in the data area
> (which should be writable anyway)? Its not obvious to me from the
> patch.
Sorry, I was hoping the Documentation file explained it well enough. On
wake the firmware needs to transfer control back to Linux, so the
firmware needs to know where to jump to. The only way I could think of
communicating that information was with a fixed memory location known to
both the firmware and to Linux. In future processors there will be a
scratch register (whose contents are saved during sleep) to solve this
problem.
> Actually, skimming through the patch I noticed a minor nit: you only
> have one .long in head_4xx.S reserving space for the wakeup_info
> struct which is 3 words long. In practice the . = in the exception
> handlers will give you plenty of space, but I think it would be good
> form to explicitly reserve the right amount of space.
It's just a (physical) pointer to the structure which is elsewhere in
memory (actually on the stack).
-Hollis
--
PowerPC Linux
IBM Linux Technology Center
** Sent via the linuxppc-dev mail list. See http://lists.linuxppc.org/
^ permalink raw reply
* Re: ipv6 stack seems to forget to send ACKs
From: Wichert Akkerman @ 2003-01-09 16:03 UTC (permalink / raw)
To: linux-kernel; +Cc: netdev
In-Reply-To: <20030109155214.GX22951@wiggy.net>
Previously Wichert Akkerman wrote:
> It seems no packets are dropped:
And now for ipv6 statistics from /proc/net/snmp6 (thanks Jamal):
Ip6InReceives 27011
Ip6InHdrErrors 0
Ip6InTooBigErrors 0
Ip6InNoRoutes 0
Ip6InAddrErrors 0
Ip6InUnknownProtos 0
Ip6InTruncatedPkts 0
Ip6InDiscards 0
Ip6InDelivers 26885
Ip6OutForwDatagrams 0
Ip6OutRequests 26848
Ip6OutDiscards 0
Ip6OutNoRoutes 0
Ip6ReasmTimeout 0
Ip6ReasmReqds 0
Ip6ReasmOKs 0
Ip6ReasmFails 0
Ip6FragOKs 0
Ip6FragFails 0
Ip6FragCreates 0
Ip6InMcastPkts 40
Ip6OutMcastPkts 0
Icmp6InMsgs 123
Icmp6InErrors 0
Icmp6InDestUnreachs 0
Icmp6InPktTooBigs 0
Icmp6InTimeExcds 0
Icmp6InParmProblems 0
Icmp6InEchos 0
Icmp6InEchoReplies 0
Icmp6InGroupMembQueries 0
Icmp6InGroupMembResponses 0
Icmp6InGroupMembReductions 0
Icmp6InRouterSolicits 0
Icmp6InRouterAdvertisements 40
Icmp6InNeighborSolicits 45
Icmp6InNeighborAdvertisements 38
Icmp6InRedirects 0
Icmp6OutMsgs 86
Icmp6OutDestUnreachs 0
Icmp6OutPktTooBigs 0
Icmp6OutTimeExcds 0
Icmp6OutParmProblems 0
Icmp6OutEchoReplies 0
Icmp6OutRouterSolicits 1
Icmp6OutNeighborSolicits 40
Icmp6OutNeighborAdvertisements 45
Icmp6OutRedirects 0
Icmp6OutGroupMembResponses 0
Icmp6OutGroupMembReductions 0
Udp6InDatagrams 0
Udp6NoPorts 0
Udp6InErrors 0
Udp6OutDatagrams 0
Wichert.
--
Wichert Akkerman <wichert@wiggy.net> http://www.wiggy.net/
A random hacker
^ permalink raw reply
* Re: ipv6 stack seems to forget to send ACKs
From: Wichert Akkerman @ 2003-01-09 15:52 UTC (permalink / raw)
To: netdev, linux-kernel
In-Reply-To: <20030109123857.A15625@bitwizard.nl>
Previously Rogier Wolff wrote:
> Can you check the stats counters, to see if they are indeed dropped?
It seems no packets are dropped:
Ip:
269716 total packets received
0 forwarded
0 incoming packets discarded
206853 incoming packets delivered
221800 requests sent out
75513 reassemblies required
12713 packets reassembled ok
10798 fragments created
Icmp:
0 ICMP messages received
0 input ICMP message failed.
ICMP input histogram:
0 ICMP messages sent
0 ICMP messages failed
ICMP output histogram:
Tcp:
666 active connections openings
0 passive connection openings
0 failed connection attempts
0 connection resets received
2 connections established
58949 segments received
65043 segments send out
0 segments retransmited
18 bad segments received.
82 resets sent
TcpExt:
ArpFilter: 0
7 TCP sockets finished time wait in fast timer
1091 delayed acks sent
2 delayed acks further delayed because of locked socket
6 packets directly queued to recvmsg prequeue.
6 packets directly received from prequeue
52427 packets header predicted
TCPPureAcks: 1259
TCPHPAcks: 10858
TCPRenoRecovery: 0
TCPSackRecovery: 0
TCPSACKReneging: 0
TCPFACKReorder: 0
TCPSACKReorder: 0
TCPRenoReorder: 0
TCPTSReorder: 0
TCPFullUndo: 0
TCPPartialUndo: 0
TCPDSACKUndo: 0
TCPLossUndo: 0
TCPLoss: 0
TCPLostRetransmit: 0
TCPRenoFailures: 0
TCPSackFailures: 0
TCPLossFailures: 0
TCPFastRetrans: 0
TCPForwardRetrans: 0
TCPSlowStartRetrans: 0
TCPTimeouts: 0
TCPRenoRecoveryFail: 0
TCPSackRecoveryFail: 0
TCPSchedulerFailed: 0
TCPRcvCollapsed: 0
TCPDSACKOldSent: 0
TCPDSACKOfoSent: 0
TCPDSACKRecv: 0
TCPDSACKOfoRecv: 0
TCPAbortOnSyn: 0
TCPAbortOnData: 24
TCPAbortOnClose: 67
TCPAbortOnMemory: 0
TCPAbortOnTimeout: 0
TCPAbortOnLinger: 0
TCPAbortFailed: 0
TCPMemoryPressures: 0
Wichert.
--
Wichert Akkerman <wichert@wiggy.net> http://www.wiggy.net/
A random hacker
^ permalink raw reply
* [Fwd: Re: DMZ trouble!]
From: David Collodel @ 2003-01-09 15:34 UTC (permalink / raw)
To: netfilter
I wasn't sure how much of it would affect what would cause the problems,
so I included the whole thing minus some stuff like the module loading.
I built this script based on a couple others I found through Google.
I've not yet figured out enough of IPTables to lock down the servers as
tightly as I'd like without breaking everything. I'm still relying on
local ipchains on each server to keep them safe until I get my head
around IPTables well enough.
Anyway, I'll definitely take all your advice under consideration. At
least now I've got an idea of what I need to do. I don't fully get how
the DNAT and SNAT work, but at least I've got a direction to be looking.
Thanks a lot for your help. :)
On Thu, 2003-01-09 at 02:58, Joel Newkirk wrote:
> On Thursday 09 January 2003 12:34 am, David Collodel wrote:
>
> {Very heavily snipped}
>
<snipped most>
> > # 3.2 PREROUTING chain
>
> > # 3.2.3 DMZ DNAT
> > #
> >
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $HTTP_IP
> > --dport 80 -j DNAT --to-destination $DMZ_HTTP_IP
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $HTTP_IP
> > --dport 22 -j DNAT --to-destination $DMZ_HTTP_IP
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $HTTP_IP
> > --dport 443 -j DNAT --to-destination $DMZ_HTTP_IP
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $HTTP_IP
> > --dport 8000 -j DNAT --to-destination $DMZ_HTTP_IP
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $HTTP_IP
> > --dport 8001 -j DNAT --to-destination $DMZ_HTTP_IP
> >
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $DNS_IP --dport
> > 53 -j DNAT --to-destination $DMZ_DNS_IP
> > $IPTABLES -t nat -A PREROUTING -p UDP -i $EXT_IFACE -d $DNS_IP --dport
> > 53 -j DNAT --to-destination $DMZ_DNS_IP
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $DNS_IP --dport
> > 443 -j DNAT --to-destination $DMZ_DNS_IP
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $DNS_IP --dport
> > 22 -j DNAT --to-destination $DMZ_DNS_IP
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $DNS_IP --dport
> > 25 -j DNAT --to-destination $DMZ_DNS_IP
> > $IPTABLES -t nat -A PREROUTING -p TCP -i $EXT_IFACE -d $DNS_IP --dport
> > 995 -j DNAT --to-destination $DMZ_DNS_IP
>
> Hmmm. Well, this is the answer to your 'real' question. I don't see ANY
> rules in PREROUTING to DNAT connections from the LAN. Those would be
> addressed -d $DNS_IP, but would be -i $LAN_IFACE.
>
> You should seriously reconsider what communications the firewall box
> itself requires, and what traffic the LAN is allowed to conduct.
>
> j
--
David Collodel <dave@crawlspaceradio.com>
^ permalink raw reply
* Re: ipv6 stack seems to forget to send ACKs
From: Wichert Akkerman @ 2003-01-09 15:41 UTC (permalink / raw)
To: netdev, linux-kernel
In-Reply-To: <20030109123857.A15625@bitwizard.nl>
Previously Rogier Wolff wrote:
> Can you check the stats counters, to see if they are indeed dropped?
If you can tell me to which counter I am looking for and where I can
find that, sure.
Wichert.
--
Wichert Akkerman <wichert@wiggy.net> http://www.wiggy.net/
A random hacker
^ permalink raw reply
* Re: [OT] cross-compiler problem
From: Krishnakumar. R @ 2003-01-09 15:31 UTC (permalink / raw)
To: Indukumar Ilangovan; +Cc: linux-mips
In-Reply-To: <040b01c2b7f2$56ff0f40$a78b4d0a@apac.cisco.com>
Hi,
Have you changed the /usr/src/linux/include/asm
link to point to the asm-mips.
IMHO you should do it.
Hope it helps
Regards
KK
On Thursday 09 January 2003 08:48 pm, you wrote:
> Hi All,
>
> I tried to build cross compiler on Red Hat Linux
> Kernel 2.4.2-2 on an i686.
> I use binutils-2.13, gcc-3.2, glibc-2.2.5,
> glibc-2.2.5-mips-build-gmon.diff, glibc-linuxthreads.tar.gz.
> I followed the instructions from
> http://www.ltc.com/~brad/mips/mipsel-linux-cross-toolchain-building.txt
>
> I installed binutils without any problems.
>
> While compiling glibc2.2.5 I get the following error.
>
> ../sysdeps/unix/syscall.S: Assembler messages:
> ../sysdeps/unix/syscall.S:28: Error: absolute expression required `li'
> make[2]: *** [/home/iilangov/crossGCC/mips/mips-glibc/misc/syscall.o] Error
> 1
> make[2]: Leaving directory `/home/iilangov/crossGCC/mips/glibc-2.2.5/misc'
> make[1]: *** [misc/subdir_lib] Error 2
> make[1]: Leaving directory `/home/iilangov/crossGCC/mips/glibc-2.2.5'
> make: *** [all] Error 2
>
> I have "asm/unistd.h" in the include path, still this problem is happening.
> Do you guys have any clue ?
>
> Thanks in Advance !
> Indu
>
>
> ----- Original Message -----
> From: "Alexandre Oliva" <aoliva@redhat.com>
> To: "Khantharat Anekboon" <dfos1@hotmail.com>
> Cc: <crossgcc@sources.redhat.com>
> Sent: Saturday, December 28, 2002 12:22 PM
> Subject: Re: cross-compiler problem
>
> | On Dec 28, 2002, "Khantharat Anekboon" <dfos1@hotmail.com> wrote:
> | > ../sysdeps/unix/syscall.S:28: Error: absolute expression required 'li'
> |
> | Looks like you're missing the kernel headers where the syscall numbers
> | are defined. (.../include/asm/unistd.h)
> |
> | --
> | Alexandre Oliva Enjoy Guarana', see http://www.ic.unicamp.br/~oliva/
> | Red Hat GCC Developer aoliva@{redhat.com, gcc.gnu.org}
> | CS PhD student at IC-Unicamp oliva@{lsd.ic.unicamp.br, gnu.org}
> | Free Software Evangelist Professional serial bug killer
> |
> | ------
> | Want more information? See the CrossGCC FAQ,
>
> http://www.objsw.com/CrossGCC/
>
> | Want to unsubscribe? Send a note to
>
> crossgcc-unsubscribe@sources.redhat.com
>
> ********************************************************
> Indukumar Ilangovan
> HCL-Cisco Offshore development center,
> 49-50, Nelson Manickam Road, Chennai - 600029 , India .
> TEL: +91-44-2374 1939 x 2215 FAX: +91-44-3741038
> Email :iilangov@cisco.com
^ permalink raw reply
* mtdram from todays CVS
From: Der Herr Hofrat @ 2003-01-09 15:59 UTC (permalink / raw)
To: linux-mtd
HI !
just pulled todays CVS compiled it and loaded mtdcore.o and mtdram.o
then mtdblock.o and made a minix filesystem on /dev/mtdblock0 - all
goes fine - mounted the filesystem, unmaounted it again - removed
mtdblock0 and when I tried to remove mtdram it tels me the device
is busy
Module Size Used by
mtdram 2068 2
mtdcore 2052 1 [mtdram]
de4x5 41104 1 (autoclean)
The modules usage count is also incorect after this operation. Kernel is
2.4.19 (rtlinux patch applied other than that vanilla kernel from kernel.org)
have not tested to see if this happens on other boxes yet - has anybody had
any problems with mtdram in the current CVS ??
thx !
hofrat
^ permalink raw reply
* tcp-window-tracking in kernel 2.4.20
From: Juliano Dapper @ 2003-01-09 15:25 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 276 bytes --]
I have problems when applying patch tcp-window-tracking in kernel
2.4.20,exist some especific procedures for apply this patch ?
Patchs quota,time,psd,string it applies without problems.
Error is:
FAILED TO APPLY THIS PATCH.
Kernel 2.4.20 + patch-o-matic 20030107.
Tkz.
[-- Attachment #2: Type: text/html, Size: 857 bytes --]
^ permalink raw reply
* Re: [2.5.54][PATCH] SB16 convertation to new PnP layer.
From: Ruslan U. Zakirov @ 2003-01-09 15:35 UTC (permalink / raw)
To: Adam Belay; +Cc: Zwane Mwaikambo, Jaroslav Kysela, linux-kernel
In-Reply-To: <20030108160939.GA17701@neo.rr.com>
>> Hello Adam and All.
>> Here is patch to sb16.c that makes it posible to compile and use this
>> driver under 2.5.54-vanilla.
>> It working for me as module and built in kernel, but it's need testing.
>> Ruslan.
AB> Hi Ruslan,
AB> I haven't had a chance to test this yet but everything does look ok. I
AB> think it will be ready once the below function is completed. Jaroslav,
AB> any comments? Also, if anyone has a built in wavetable, as previously
AB> mentioned by Zwane, I'd like to hear how this patch works for you. This
AB> patch makes full use of pnp card services, which is prefered for cards
AB> that have several closely related devices, and it would be great to
AB> further test those code paths.
AB> Thanks,
AB> Adam
>>
>> -#endif /* __ISAPNP__ */
>> +static void snd_sb16_isapnp_remove(struct pnp_card * card)
>> +{
>> + /*FIX ME*/
>> +}
>> +
>>
Hello Adam and Other.
I have got some stupid questions:
1) As I've understood we need to free all reserved resources when
remove function called, am I right?
2) Who decide card is accessible at some time or not?
3) And the last, where is the place of ISA not PnP cards in the device
lists? As I think, they are fit with PnP bus, but their resources
static(not configurable) or it's just lays under ALSA, apears in
/proc/asound only and ALSA internals?
Ruslan.
^ permalink raw reply
* [OT] cross-compiler problem
From: Indukumar Ilangovan @ 2003-01-09 15:18 UTC (permalink / raw)
To: linux-kernel, linux-mips
Hi All,
I tried to build cross compiler on Red Hat Linux
Kernel 2.4.2-2 on an i686.
I use binutils-2.13, gcc-3.2, glibc-2.2.5, glibc-2.2.5-mips-build-gmon.diff,
glibc-linuxthreads.tar.gz.
I followed the instructions from
http://www.ltc.com/~brad/mips/mipsel-linux-cross-toolchain-building.txt
I installed binutils without any problems.
While compiling glibc2.2.5 I get the following error.
../sysdeps/unix/syscall.S: Assembler messages:
../sysdeps/unix/syscall.S:28: Error: absolute expression required `li'
make[2]: *** [/home/iilangov/crossGCC/mips/mips-glibc/misc/syscall.o] Error
1
make[2]: Leaving directory `/home/iilangov/crossGCC/mips/glibc-2.2.5/misc'
make[1]: *** [misc/subdir_lib] Error 2
make[1]: Leaving directory `/home/iilangov/crossGCC/mips/glibc-2.2.5'
make: *** [all] Error 2
I have "asm/unistd.h" in the include path, still this problem is happening.
Do you guys have any clue ?
Thanks in Advance !
Indu
----- Original Message -----
From: "Alexandre Oliva" <aoliva@redhat.com>
To: "Khantharat Anekboon" <dfos1@hotmail.com>
Cc: <crossgcc@sources.redhat.com>
Sent: Saturday, December 28, 2002 12:22 PM
Subject: Re: cross-compiler problem
| On Dec 28, 2002, "Khantharat Anekboon" <dfos1@hotmail.com> wrote:
|
| > ../sysdeps/unix/syscall.S:28: Error: absolute expression required 'li'
|
| Looks like you're missing the kernel headers where the syscall numbers
| are defined. (.../include/asm/unistd.h)
|
| --
| Alexandre Oliva Enjoy Guarana', see http://www.ic.unicamp.br/~oliva/
| Red Hat GCC Developer aoliva@{redhat.com, gcc.gnu.org}
| CS PhD student at IC-Unicamp oliva@{lsd.ic.unicamp.br, gnu.org}
| Free Software Evangelist Professional serial bug killer
|
| ------
| Want more information? See the CrossGCC FAQ,
http://www.objsw.com/CrossGCC/
| Want to unsubscribe? Send a note to
crossgcc-unsubscribe@sources.redhat.com
********************************************************
Indukumar Ilangovan
HCL-Cisco Offshore development center,
49-50, Nelson Manickam Road, Chennai - 600029 , India .
TEL: +91-44-2374 1939 x 2215 FAX: +91-44-3741038
Email :iilangov@cisco.com
^ permalink raw reply
* [OT] cross-compiler problem
From: Indukumar Ilangovan @ 2003-01-09 15:18 UTC (permalink / raw)
To: linux-kernel, linux-mips
Hi All,
I tried to build cross compiler on Red Hat Linux
Kernel 2.4.2-2 on an i686.
I use binutils-2.13, gcc-3.2, glibc-2.2.5, glibc-2.2.5-mips-build-gmon.diff,
glibc-linuxthreads.tar.gz.
I followed the instructions from
http://www.ltc.com/~brad/mips/mipsel-linux-cross-toolchain-building.txt
I installed binutils without any problems.
While compiling glibc2.2.5 I get the following error.
../sysdeps/unix/syscall.S: Assembler messages:
../sysdeps/unix/syscall.S:28: Error: absolute expression required `li'
make[2]: *** [/home/iilangov/crossGCC/mips/mips-glibc/misc/syscall.o] Error
1
make[2]: Leaving directory `/home/iilangov/crossGCC/mips/glibc-2.2.5/misc'
make[1]: *** [misc/subdir_lib] Error 2
make[1]: Leaving directory `/home/iilangov/crossGCC/mips/glibc-2.2.5'
make: *** [all] Error 2
I have "asm/unistd.h" in the include path, still this problem is happening.
Do you guys have any clue ?
Thanks in Advance !
Indu
----- Original Message -----
From: "Alexandre Oliva" <aoliva@redhat.com>
To: "Khantharat Anekboon" <dfos1@hotmail.com>
Cc: <crossgcc@sources.redhat.com>
Sent: Saturday, December 28, 2002 12:22 PM
Subject: Re: cross-compiler problem
| On Dec 28, 2002, "Khantharat Anekboon" <dfos1@hotmail.com> wrote:
|
| > ../sysdeps/unix/syscall.S:28: Error: absolute expression required 'li'
|
| Looks like you're missing the kernel headers where the syscall numbers
| are defined. (.../include/asm/unistd.h)
|
| --
| Alexandre Oliva Enjoy Guarana', see http://www.ic.unicamp.br/~oliva/
| Red Hat GCC Developer aoliva@{redhat.com, gcc.gnu.org}
| CS PhD student at IC-Unicamp oliva@{lsd.ic.unicamp.br, gnu.org}
| Free Software Evangelist Professional serial bug killer
|
| ------
| Want more information? See the CrossGCC FAQ,
http://www.objsw.com/CrossGCC/
| Want to unsubscribe? Send a note to
crossgcc-unsubscribe@sources.redhat.com
********************************************************
Indukumar Ilangovan
HCL-Cisco Offshore development center,
49-50, Nelson Manickam Road, Chennai - 600029 , India .
TEL: +91-44-2374 1939 x 2215 FAX: +91-44-3741038
Email :iilangov@cisco.com
^ permalink raw reply
* [SOLVED] kernel compile error
From: Rodrigo F. Baroni @ 2003-01-09 15:26 UTC (permalink / raw)
To: linux-kernel
In-Reply-To: <20030109021540.80049.qmail@web11105.mail.yahoo.com>
The problem was the 2.4.18 kernel version. I got
another 2.4.18 kernel and the compilation finished
normally -without support to SMP (because I wasn't get
install some modules with that other one).
So, problem solved finally.
----------------------------------------------
--- "Rodrigo F. Baroni" <rodrigobaroni@yahoo.com.br>
escreveu: > Hello all,
>
>
> There is a good time that I have trying to
> compile
> a kernel in a pc 233 mhz (motherboard lmr 591 -
> chipset sis, all-on-board), and so the follow error
> below happen.
>
>
> Does anybody knows what is going on please ?!
> (it's a 2.4.18 kernel in a debian 3)
>
>
>
>
> Rodrigo F Baroni
> Computer Science Grad Student
>
>
_______________________________________________________________________
> Busca Yahoo!
> O melhor lugar para encontrar tudo o que você
> procura na Internet
> http://br.busca.yahoo.com/> make[2]: Entering
directory
> `/usr/src/kernel-source-2.4.18/kernel'
> gcc -D__KERNEL__
> -I/usr/src/kernel-source-2.4.18/include -Wall
> -Wstrict-prototypes -Wno-trigraphs -O2
> -fomit-frame-pointer -fno-strict-aliasing
> -fno-common -pi
> pe -mpreferred-stack-boundary=2 -march=i586
> -DKBUILD_BASENAME=ksyms -DEXPORT_SYMTAB -c ksyms.c
> In file included from
>
/usr/src/kernel-source-2.4.18/include/linux/modversions.h:64,
> from
>
/usr/src/kernel-source-2.4.18/include/linux/module.h:21,
> from ksyms.c:14:
>
/usr/src/kernel-source-2.4.18/include/linux/modules/dec_and_lock.ver:2:
> warning: `atomic_dec_and_lock' redefined
>
/usr/src/kernel-source-2.4.18/include/linux/spinlock.h:48:
> warning: this is the location of the previous
> definition
> In file included from
>
/usr/src/kernel-source-2.4.18/include/linux/modversions.h:117,
> from
>
/usr/src/kernel-source-2.4.18/include/linux/module.h:21,
> from ksyms.c:14:
>
/usr/src/kernel-source-2.4.18/include/linux/modules/i386_ksyms.ver:84:
> warning: `cpu_data' redefined
>
/usr/src/kernel-source-2.4.18/include/asm/processor.h:79:
> warning: this is the location of the previous
> definition
>
/usr/src/kernel-source-2.4.18/include/linux/modules/i386_ksyms.ver:88:
> warning: `smp_num_cpus' redefined
>
/usr/src/kernel-source-2.4.18/include/linux/smp.h:80:
> warning: this is the location of the previous
> definition
>
/usr/src/kernel-source-2.4.18/include/linux/modules/i386_ksyms.ver:90:
> warning: `cpu_online_map' redefined
>
/usr/src/kernel-source-2.4.18/include/linux/smp.h:88:
> warning: this is the location of the previous
> definition
>
/usr/src/kernel-source-2.4.18/include/linux/modules/i386_ksyms.ver:104:
> warning: `smp_call_function' redefined
>
/usr/src/kernel-source-2.4.18/include/linux/smp.h:87:
> warning: this is the location of the previous
> definition
> In file included from
>
/usr/src/kernel-source-2.4.18/include/linux/modversions.h:144,
> from
>
/usr/src/kernel-source-2.4.18/include/linux/module.h:21,
> from ksyms.c:14:
>
/usr/src/kernel-source-2.4.18/include/linux/modules/ksyms.ver:526:
> warning: `del_timer_sync' redefined
>
/usr/src/kernel-source-2.4.18/include/linux/timer.h:30:
> warning: this is the location of the previous
> definition
> In file included from
>
/usr/src/kernel-source-2.4.18/include/linux/interrupt.h:45,
> from ksyms.c:21:
>
/usr/src/kernel-source-2.4.18/include/asm/hardirq.h:37:
> warning: `synchronize_irq' redefined
>
/usr/src/kernel-source-2.4.18/include/linux/modules/i386_ksyms.ver:92:
> warning: this is the location of the previous
> definition
> In file included from ksyms.c:17:
>
/usr/src/kernel-source-2.4.18/include/linux/kernel_stat.h:
> In function `kstat_irqs':
>
/usr/src/kernel-source-2.4.18/include/linux/kernel_stat.h:48:
> `smp_num_cpus' undeclared (first use in this
> function)
>
/usr/src/kernel-source-2.4.18/include/linux/kernel_stat.h:48:
> (Each undeclared identifier is reported only once
>
/usr/src/kernel-source-2.4.18/include/linux/kernel_stat.h:48:
> for each function it appears in.)
> make[2]: *** [ksyms.o] Error 1
> make[2]: Leaving directory
> `/usr/src/kernel-source-2.4.18/kernel'
> make[1]: *** [first_rule] Error 2
> make[1]: Leaving directory
> `/usr/src/kernel-source-2.4.18/kernel'
> make: *** [_dir_kernel] Error 2
> carol:/usr/src/kernel-source-2.4.18#
>
>
_______________________________________________________________________
Busca Yahoo!
O melhor lugar para encontrar tudo o que você procura na Internet
http://br.busca.yahoo.com/
^ permalink raw reply
* Re: [Linux-ia64] disabling nics using boot options.
From: Roy Dragseth @ 2003-01-09 15:16 UTC (permalink / raw)
To: linux-ia64
In-Reply-To: <marc-linux-ia64-105590709805655@msgid-missing>
Further investigation shows that if I connect the Gbit interface to a 10Mbs
hub everything works ok, e.g. using the ksdevice=eth2 boot option works as
expected.
I have narrowed this down to the following problem: When the init process
tries to configure the eth2 with dhcp it fail, but if I logon as root and run
/etc/init.d/network start
everything works ok. Subsequent reboots also works ok because now the
information is cached in /etc/dhcpc/. If I remove the cached info the
problem turn up again.
Do anyone know what could be different between init running the network start
and when root does it?
r.
^ permalink raw reply
* What's in a name?
From: Vlad@Vlad.geekizoid.com @ 2003-01-09 15:18 UTC (permalink / raw)
To: 'John Alvord'; +Cc: linux-kernel, rms
In-Reply-To: <nbdq1vo9enjh9c6gnh68mpg0ebt7n22fhi@4ax.com>
And in that same period, look at Linux, and then look at Hurd. Hurd even
has the advantage of using giant chunks of Linux code, but it still is
basically useless.
Why should Linux be refered to as GNU/Linux because of tools, and yet Hurd
doesn't give credit where credit is due? RMS has done more to hurt GNU with
his current stance on the matter than Microsoft ever could. He's getting
annoying, too.
Regards,
Scott
-----Original Message-----
From: John Alvord [mailto:jalvo@mbay.net]
Sent: Thursday, January 09, 2003 2:58 AM
To: vlad@geekizoid.com
Cc: rms@gnu.org; linux-kernel@vger.kernel.org
Subject: Re: Nvidia and its choice to read the GPL "differently"
Try to imagine the last 12 years of Linux without
gcc
binutils
unix programs such as ls, cp, rm, etc
I personally believe the current state of the Linux kernel would have
been impossible to achieve (at this time) without the above tools.
The Linux kernel development has stood on the shoulders of the GNU
effort the whole time.
Whether the result should be labeled as GNU/Linux is semantics - what
is the meaning of "operating system". And it is redundant... after
all there is no Linux without GNU, so why force unnecessary
information on terms. If there was an ATT/Linux and an Intel/Linux,
having a GNU/Linux would make some sense... but that is not the way it
is. GNU/Linux is singular, so Linux makes a reasonable contraction.
Distributor marketting wants a neat snapy name that is easy to
remember. Linux is close enough to unix to merge meanings a bit.
People who read about Linus Torvalds get the Linus/Linux play on
words.
Another puzzling aspect to me is that GNU really goes beyond what I
think of as an operating system. I have a suite of GNU tools installed
on a Windows NT machine and I use make, ls, cp, mv all day. So I am
using GNU on a foreign operating system... or does my usage needs to
be labeled as GNU/Windows NT?
john alvord
On Wed, 8 Jan 2003 20:26:09 -0600, "Vlad@Vlad.geekizoid.com"
<vlad@vlad.geekizoid.com> wrote:
>Do you actually buy your own bullshit here? If so, that's sad. I used to
>respect you. I'd like to see you put your money where your mouth is -
PROVE
>that GNU (not just people who have release GPL'd software) contributed most
>of the work to say Slackware, or Debian, or Red Hat.
>
>Face it - you're full of it. You're not fooling anyone either.
>
>-----Original Message-----
>From: linux-kernel-owner@vger.kernel.org
>[mailto:linux-kernel-owner@vger.kernel.org]On Behalf Of Richard Stallman
>Sent: Wednesday, January 08, 2003 2:00 AM
>To: lm@bitmover.com
>Cc: lm@bitmover.com; acahalan@cs.uml.edu; linux-kernel@vger.kernel.org
>Subject: Re: Nvidia and its choice to read the GPL "differently"
>
>
> Great. So not only is there no legal need to cite GNU in the Linux
> name, there is no ethical obligation either.
>
>When you take part of my statement, stretch it, interpret it based on
>assumptions you know I disagree with, and present the result as
>something I said, that doesn't prove anything. It is childish.
>
>There is no ethical obligation to mention secondary contributions
>incorporated in a large project. There ethical obligation is to cite
>the main developer. In the GNU/Linux system, the GNU Project is the
>principal contributor; the system is more GNU than anything else,
>and we started it.
^ permalink raw reply
* Re: New Script
From: Anders Fugmann @ 2003-01-09 15:06 UTC (permalink / raw)
To: mdew; +Cc: netfilter
In-Reply-To: <1042115936.423.58.camel@nirvana>
mdew wrote:
> Ok, after taking a few samples from scripts in the mailing list, Ive
> come up with this...hopefully my edonkey problem has been solved with
> this script. I havent actually tested this yet, Probably tomorrow (its a
> bit late)
Next time - Test first, then post.
>
> current Router setup.
> (Internet) 210.54.175.12->eth0---Router--->eth1 10.0.0.6 -=> 10.0.0.x
>
>
> #!/bin/bash
>
> IPTABLES="/sbin/iptables"
> PAUL="10.0.0.9"
> echo "1" > /proc/sys/net/ipv4/ip_forward
>
> echo "Executing The Firwall..."
> echo ""
> echo -n "Loading Modules..."
> /sbin/modprobe ip_conntrack_ftp
> /sbin/modprobe ip_conntrack_irc
> /sbin/modprobe ip_nat_irc
> /sbin/modprobe ip_nat_ftp
> /sbin/modprobe ipt_state
> /sbin/modprobe ipt_limit
> /sbin/modprobe ipt_LOG
> echo -n "Done"
>
> $IPTABLES -F INPUT
> $IPTABLES -F OUTPUT
> $IPTABLES -F FORWARD
I would recommend that you set the default policy here to DENY and add
the rules:
$IPTABLES -a FORWARD -i eth0 -o eth1 -m state --state \
RELATED,ESTABLISHED -j ACCEPT
$IPTABLES -a FORWARD -o eth0 -i eth1 -j ACCEPT
to allow machines behind to firewall to comminucate freely with servers
on the internet.
> $IPTABLES -P INPUT ACCEPT
Uh. Dont allow anything on the INPUT chain.
> $IPTABLES -P OUTPUT ACCEPT
>
> echo "Allow unlimited traffic on the loopback interface"
> $IPTABLES -A INPUT -i lo -j ACCEPT
> $IPTABLES -A OUTPUT -o lo -j ACCEPT
>
> echo "Refusing spoofed packets pretending to be from your IP address"
> $IPTABLES -A INPUT -s 210.54.175.12 -j DROP
>
> echo "Allow SSH"
> # Is this correct?
> $IPTABLES -A INPUT -i eth0 -p tcp --sport 22 -j ACCEPT
> $IPTABLES -A INPUT -i eth1 -p tcp --sport 22 -j ACCEPT
> $IPTABLES -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT
> $IPTABLES -A INPUT -i eth1 -p tcp --dport 22 -j ACCEPT
>
> echo "Allow ftp"
> $IPTABLES -A INPUT -p tcp --sport 21 -m state --state ESTABLISHED -j
> ACCEPT
> $IPTABLES -A OUTPUT -p tcp --dport 21 -m state --state NEW,ESTABLISHED
> -j ACCEPT
>
> echo "Active ftp"
> $IPTABLES -A INPUT -p tcp --sport 20 -m state --state
> ESTABLISHED,RELATED -j ACCEPT
> $IPTABLES -A OUTPUT -p tcp --dport 20 -m state --state ESTABLISHED -j
> ACCEPT
>
> echo "Passive ftp"
> $IPTABLES -A INPUT -p tcp --sport 1024:65535 --dport 1024:65535 -m state
> --state ESTABLISHED -j ACCEPT
> $IPTABLES -A OUTPUT -p tcp --sport 1024:65535 --dport 1024:65535 -m
> state --state ESTABLISHED,RELATED -j ACCEPT
>
> echo "Allow DNS"
> $IPTABLES -A INPUT -p tcp --sport 53 -j ACCEPT
> $IPTABLES -A INPUT -p udp --sport 53 -j ACCEPT
> $IPTABLES -A OUTPUT -p tcp --dport 53 -j ACCEPT
> $IPTABLES -A OUTPUT -p udp --dport 53 -j ACCEPT
>
> echo "Allow SFTP"
> $IPTABLES -A OUTPUT -p tcp --dport 115 -j ACCEPT
> $IPTABLES -A INPUT -p tcp --sport 115 -j ACCEPT
>
> echo "Allow HTTP"
> $IPTABLES -A OUTPUT -p tcp --dport 80 -j ACCEPT
> $IPTABLES -A INPUT -p tcp --sport 80 -j ACCEPT
>
> echo "Allow https"
> $IPTABLES -A OUTPUT -p tcp --dport 443 -j ACCEPT
> $IPTABLES -A INPUT -p tcp --sport 443 -j ACCEPT
>
> echo "Rejecting all connections to 135:139"
> $IPTABLES -N NETBIOS
> $IPTABLES -A INPUT -p udp --sport 135:139 -j NETBIOS
> $IPTABLES -A INPUT -p tcp --sport 135:139 -j NETBIOS
> $IPTABLES -A INPUT -p udp --dport 135:139 -j NETBIOS
> $IPTABLES -A INPUT -p tcp --dport 135:139 -j NETBIOS
> $IPTABLES -A NETBIOS -j LOG --log-prefix "IPTABLES NETBIOS: "
> $IPTABLES -A NETBIOS -j DROP
>
> echo "Limit port 4665 traffic to PAUL"
> $IPTABLES -N PAULS_STUFF
> $IPTABLES -A FORWARD -p tcp -s $PAUL --dport 4665 -m limit --limit
> 1/hour -j PAULS_STUFF
> $IPTABLES -A FORWARD -p udp -s $PAUL --dport 4665 -m limit --limit
> 1/hour -j PAULS_STUFF
> $IPTABLES -A FORWARD -p udp -s $PAUL --sport 4665 -m limit --limit
> 1/hour -j PAULS_STUFF
> $IPTABLES -A FORWARD -p tcp -s $PAUL --sport 4665 -m limit --limit
> 1/hour -j PAULS_STUFF
> $IPTABLES -A PAULS_STUFF -j LOG --log-prefix "IPTABLES PAUL: "
> $IPTABLES -A PAULS_STUFF -j ACCEPT
What are you trying here? Linit should not be used as traffic shaping.
Please use programs in the iproute2 package instead. It will handle
things much better.
>
> echo "Allowing SMTP"
> $IPTABLES -A OUTPUT -p tcp --dport 25 -j ACCEPT
> $IPTABLES -A INPUT -p tcp --sport 25 -j ACCEPT
>
> echo "Allowing POP3"
> $IPTABLES -A OUTPUT -p tcp --dport 110 -j ACCEPT
> $IPTABLES -A INPUT -p tcp --sport 110 -j ACCEPT
>
> echo "Allowing Ident"
> $IPTABLES -A OUTPUT -p tcp --dport 113 -j ACCEPT
> $IPTABLES -A INPUT -p tcp --sport 113 -j ACCEPT
>
> echo "Allowing Netmeeting/MSN"
> $IPTABLES -t nat -A PREROUTING -i eth0 -p tcp --dport 1863 -j \
> REDIRECT --to-ports 1863
> $IPTABLES -t nat -A PREROUTING -i eth0 -p tcp --dport 389 -j \
> REDIRECT --to-ports 389
> $IPTABLES -t nat -A PREROUTING -i eth0 -p tcp --dport 522 -j \
> REDIRECT --to-ports 522
>
> echo "Allowing EDonkey2k/Emule"
> echo "See: http://www.emule-project.net/faq/ports.htm"
> # should i use any -A FORWARD or PREROUTING here?
> $IPTABLES -A OUTPUT -p tcp --dport 4661 -j ACCEPT
> $IPTABLES -A INPUT -p tcp --sport 4661 -j ACCEPT
> $IPTABLES -A OUTPUT -p tcp --dport 4662 -j ACCEPT
> $IPTABLES -A INPUT -p tcp --sport 4662 -j ACCEPT
> $IPTABLES -A OUTPUT -p udp --dport 4665 -j ACCEPT
> $IPTABLES -A INPUT -p udp --sport 4665 -j ACCEPT
> $IPTABLES -A OUTPUT -p udp --dport 4672 -j ACCEPT
> $IPTABLES -A INPUT -p udp --sport 4672 -j ACCEPT
I'm not sure what you want here. But if all you want is to allow users
to connect to server on the internet on port 4672, then its covered be
the rules below.
>
> $IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
For the protocols ssh, ftp, http, dns, smtp, pop3 and ident you can
delete all the rules conserning these, as the line above take care of
all that.
> $IPTABLES -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
This is not needed, as the policy on the OUTPUT chain is already ACCEPT.
Regards
Anders Fugmann
^ permalink raw reply
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.