Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[obsolete] iptables question
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
thom_raindog
Guru
Guru


Joined: 16 May 2008
Posts: 400

PostPosted: Wed Jul 09, 2008 7:38 pm    Post subject: [obsolete] iptables question Reply with quote

Hi there,

at appdb
http://bugs.winehq.org/show_bug.cgi?id=12302
people are working on a workaround for LotrO killing bandwidth. One approach is to use iptables to drop certain identical packages that are sent too quickly.

Here is the command that is given:
Code:
iptables -A FORWARD -p udp -m multiport --dports 9002,9008 -m length --length 1:100 -m filterdupes --cache-duration 85 -dupes-allowed 2 -j DROP



Executing that I get:
an error where "something failed strangely.. I can't post that anymore, since I got rid of that by adding a few match codes to my kernel.

What's wrong there?
I have just emerged iptables for this very purpose. Do I need to set it up in a certain way first?
I am COMPLETELY new to the concept of iptables, so I can only copy and paste for now..


Last edited by thom_raindog on Thu Jul 10, 2008 3:10 pm; edited 3 times in total
Back to top
View user's profile Send private message
massimo
Veteran
Veteran


Joined: 22 Jun 2003
Posts: 1226

PostPosted: Thu Jul 10, 2008 4:49 am    Post subject: Reply with quote

You have to enable support for packet filtering in the kernel too (netfilter).
_________________
Hello 911? How are you?
Back to top
View user's profile Send private message
Akhouk
Guru
Guru


Joined: 23 May 2003
Posts: 476
Location: The Two Niles, Africa

PostPosted: Thu Jul 10, 2008 6:03 am    Post subject: Reply with quote

What error message do you get? It is not clear from your post.
_________________
AMD 64 3500+, 2Gb RAM DDR400, 2 x 180Gb SATA, 256Mb Nvidia
Back to top
View user's profile Send private message
thom_raindog
Guru
Guru


Joined: 16 May 2008
Posts: 400

PostPosted: Thu Jul 10, 2008 7:28 am    Post subject: Reply with quote

I edited my first post to try and answer your question,
The whole thing is rather pointless now anyway since one switch used (-m filterdupes) was just a proposed idea and does not exist...
Thanks anyway :)
Back to top
View user's profile Send private message
Akhouk
Guru
Guru


Joined: 23 May 2003
Posts: 476
Location: The Two Niles, Africa

PostPosted: Thu Jul 10, 2008 7:32 am    Post subject: Reply with quote

Was wondering why I hadn't heard of filterdupes.
_________________
AMD 64 3500+, 2Gb RAM DDR400, 2 x 180Gb SATA, 256Mb Nvidia
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum