Search:

Hmmm maybe this is what I will try :-

1) add vlan1 into bridge br0
2) perform shaping on vlan0 and vlan1 respectively.

Wish me good luck and appreciate your comments.

Hey guys,

I have a quite separate question on QoS. I want to use my Asus wl500g(x) as a bridging mode device with QoS, ie I want to connect to the LAN side of an existing router and perform QoS...

http://www.cs.auckland.ac.nz/~pgut001/pubs/linux_vpn.txt

Cheers

It may appear to be straight forward but as far as wl500g even right to upto 1.9.2.7-4 is concerned, various kernel options have not been turned on. So it is really pretty far away from usable. The...

Sorry I find it strange there are so much interest in CIPE. There is already a openvpn. Is CIPE more popular than openvpn ?

Cheers

I assume you are having Netmeeting behind the ASUS WL-500g. To make an outbound call, there is nothing you need to do, it just works, thanks to h323 connection tracking. To allow outside people to...

Ethertap.o is an old driver. The tun.o alone is able to provide tun and tap devices. For the purpose of openvpn and other applications, ethertap.o is not necessary.

Cheers.

The openwrt builds everything from scratch, including the toolchain. As for second question, you have to look at the makefiles.

Cheers.

It seems the openwrt have used a newer toolchain with the latest uclibc. The last time I checked, their firmware does not support wl500gx, but their tool chain should be good.

Cheers.

That's being the case why pick 443 ? Should just pick a big obscure number instead of 443, example 22443.

Cheers

I don't understand. Why don't just listen to port 22 and modify the INPUT chain to accept connection from the WAN on port 22 ? Why must we bother with port 443 at all ?

Cheers

OK perhaps I misunderstood the question. It looks like you guys are only interested in IPSEC passthru and not to have the asus running IPSEC.

Cheers

No it does not work with Checkpoint via IPSEC. Either you buy a different box, or you modify the firmware yourself. It's not a simple modification. But it can be done.

Cheers

It is not a userspace program. It's for use by the kernel, although at this moment I am not sure if the user space counter part is present or not. You could ***TRY*** to use it this way ( for example...

Not too worry and no insult intended, I doubt too many people understand my reply. ;) But I am too lazy to write a 100 pages story, so I am only posting the gist. With those keywords appearing in...

p2p loss connection is PROBABLY due to connection table full. To verify if it is really hitting the max, do this :-

cat /proc/sys/net/ipv4/ip_conntrack_max

cat...

Absolutely no plan to branch off a parallel series but I can see it shall be quite difficult to reconcil everybody's requirements into one series. Everybody's requirement is not quite the same. And...

As it turns out, I could not compile connlimit as modules, something is not right, the module will complain unresolved symbol with ip_conntrack_find_get. Other people hit the same problem too if you...

iplimit is the old name for connlimit. Both iptables and kernel need to be patched to have this.

I have replaced the iptables 1.2.7a with 1.2.9 ( which includes extension ipt_connlimit and also...

I have included the kernel modules ipt_TTL.o and ipt_ttl.o. Without using the corresponding kernel and iptables which I compiled, I am not sure if it is going to work by patching these modules alone....

Yes, I created one - based on 1.9.2.7-4 which can do that.

But I am not sure if it is a good idea for you to use my firmware.

Cheers.

Bad news. No cpp please. You need to do a lot more things to have cpp programs running on the system.

Cheers.

I was told that's not possible with 500g but I am not totally sure.

But I am pretty sure you can do it with wl500gx because I managed to do it on my wl500gx. But it will have these names like...

One important point is not to update on the currently use libraries. It should be done on the offline files.

Your concern is valid. But it is a question of how desperate you are. If you are desperate enough, you would want to give it a try. Certainly I will not want to endorse this operation but based on my...