iptables: connlimit

[Jaroslaw Dziubek]

On Sat, 24 Jan 2004, PLD Linux wrote:

> qrde patrz a mi się nie udawało... powiedz jak to zrobiłes? z opisu na
> stronie pld-linux.org mi się wieszało. znajdz chwilke czasu i napisz opis -
> będe bardzo wdzięczny.
(jade przyklad z jednej z instalacji):
1) instalujesz hotplug:
 [root w matuszewski-gw root]# rpm -q hotplug
 hotplug-2003_08_05-2
2) odpalasz USB - ja mam dosc stare komputery i musze miec dodatkowa karte:
 [kawalek z lspci]
 00:09.0 USB Controller: OPTi Inc. 82C861 (rev 10)
 [kawalek z lsmod]
 usb-ohci               17288   0  (unused)
 usbcore                60844   1  (autoclean) [acm adiusbadsl usb-ohci]
 [Tutaj mam akurat usb-ohci (stara karta), ale pewnie u Ciebie bedzie
 usb-uhci]
3) instalujesz sterowniki do Sagema:
 [root w matuszewski-gw root]# rpm -qa|grep "eagle\|fast"
 kernel-usb-fast800-1.0.4-5 w 2.4.21_1.6
 eagle-utils-1.0.4-5
4) zgodnie z FAQ modyfikujesz /etc/analog/adisusbadsl.conf
5) podlaczasz Sagema do portu USB - w logach powinno byc:
  kernel: hub.c: new USB device 00:11.0-2, assigned address 3
  kernel: [adi] New USB ADSL device detected, waiting for DSP code...
  kernel: [adi] created proc entry at : /proc/driver/adimodem/001-003
  kernel: usb.c: registered new driver acm
  kernel: acm.c: v0.21:USB Abstract Control Model driver for USB modems and ISDN adapters
  kernel: [adi] ioctl ADIUSBADSLOPTIONS received
  kernel: [adi] Reassembly buffer size set to 1536
  kernel: [adi] ioctl ADIUSBADSLOPTIONS received
  kernel: [adi] Reassembly buffer size set to 1536
  kernel: [adi] ioctl ADIUSBADSLDSP received
  kernel: [adi] Loading DSP code to device...
  kernel: [adi] DSP code successfully loaded to device
  kernel: [adi] ioctl ADIUSBADSLDSP received
  kernel: [adi] Loading DSP code to device...
  kernel: [adi] DSP code successfully loaded to device
  kernel: [adi] ioctl ADIUSBADSLOPTIONS received
  kernel: [adi] Reassembly buffer size set to 1536
  kernel: [adi] ioctl ADIUSBADSLDSP received
  kernel: [adi] Loading DSP code to device...
  kernel: [adi] DSP code successfully loaded to device
  [teraz czekasz az diodka adsl przestanie migac]
6) dajesz:
  adslstart
  [w logach powinno sie pojawic:]
   pppd[2468]: pppd 2.4.2b3 started by root, uid 0
   pppd[2468]: Using interface ppp0
   pppd[2468]: Connect: ppp0 <--> /dev/pts/1
   pppoa[2471]: Wrong length field in incoming data 24576 (70)
   pppd[2468]: CHAP authentication succeeded
   pppd[2468]: Cannot determine ethernet address for proxy ARP
   pppd[2468]: local  IP address 80.50.57.175
   pppd[2468]: remote IP address 213.25.2.163
   pppd[2468]: primary   DNS address 194.204.152.34
   pppd[2468]: secondary DNS address 217.98.63.164
   [w tej chwili mam tam tak:]
   16: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
       link/ether 00:60:4c:16:2b:97 brd ff:ff:ff:ff:ff:ff
       inet 192.168.60.30/24 brd 192.168.60.255 scope global eth1
       inet6 fe80::260:4cff:fe16:2b97/64 scope link
   55: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP> mtu 1492 qdisc pfifo_fast qlen 3
       link/ppp
       inet 80.54.31.135 peer 213.25.2.163/32 scope global ppp0

7) dodajesz do /etc/inittab
   adsl:2345:respawn:/usr/sbin/adsl.inittab
   robisz "telinit q"
8) ustawiasz maskarade (NIE SNAT!!)
9) zapominasz o calej sprawie ;-)


> gratuluje uptimuuuu. (ja na sdi mam 60dni:)
ja u jednego z klientow (SDI) mam uptime:)))
[root w melbud-gw root]# uptime
 13:01:05 up 229 days,  2:10,  3 users,  load average: 0.16, 0.03, 0.01
 
-- 
Yaro

       IRL: Jaroslaw Dziubek       |     "Księga życia zaczyna się
    http://yaro.perfect.net.pl/    | od mężczyzny i kobiety w ogrodzie,
KNM Member: http://www.knm.org.pl/ |     a kończy się rewelacjami."
 IRC: Yaro, ICQ: 1340145, GG: 1110 |              O. Wilde