Linux Networking
--
Questions
--
Followers
Top Experts
We're setting up a triple homed linux box with Slackware 10.2. We're running a patched 2.6.13.5 kernel for various reasons.
eth0 = LAN
eth1 = ISP 1
eth2 = ISP 2
Both ISPs give us a static 8 IP range.
We first tried to do something like this: http://lartc.org/howto/lartc.rpdb.multiple-links.html
which sort of works but seems a bit unreliable. (bind 9.3.2 is installed locally)
As an alternative I'm now trying to get this to work: http://www.linux.com.lb/wiki/index.pl?node=Load%20Balancing%20Across%20Multiple%20Links (this is worth a read too: http://linux-ip.net/html/adv-multi-internet.html#adv-multi-internet-inbound )
Here's the problem - it requires the "random" option from netfilter iptables patch-o-matic to be installed.
We've got iptables 1.3.5 installed but when I run the patchomatic ./runme base command it does not include "random" as a target. Patch-o-matic version is patch-o-matic-ng-20040621.
Is anybody able to let me know how to patch the kernel and iptables to include this target?
libipt_random.c appears to be in iptables 1.3.5 but there is no libipt_random.so after compilation.
Can anybody help me figure out what's going on please?
Zero AI Policy
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
wesbird, I suppose you are using kernel 2.6.15?
Read here how to install 'random' module. Probably you have old version of patch-o-magic. Read here for more details: http://www.linuxjournal.com/node/7180/
http://www.netfilter.org/patch-o-matic/pom-base.html#pom-base-random
Running POM is simple; download the latest Patch-o-matic tarball from the directory /pub/patch-o-matic on ftp.netfilter.org, restore it on your system and run the following command while logged in as root. Make sure to give the correct kernel source directory name as the value of the KERNEL_DIR parameter:
KERNEL_DIR=/usr/src/linux-
Am I making some silly mistake here?
did a make clean on the kernel,
tried ./runme random on the correct kernel source tree
it said that the patch was already applied
rebuilt the kernel and I'm still getting this:
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Couldn't load match `random':/usr/lib/iptables






EARN REWARDS FOR ASKING, ANSWERING, AND MORE.
Earn free swag for participating on the platform.
ftp.netfilter.org/pub/patch-o-matic-ng/snapshot/patch-o-matic-ng-20060427.tar.bz2 has allowed me select it, but I've still got a couple of problems.
iptables: Unknown error 4294967295
>> After patching kernel, don't forget to run 'make menuconfig' a to toggle 'random match' and 'nth match' modules in appropriate branches.
I've just spotted that I've still got a problem with the build. I'm using make gconfig as opposed to menuconfig - it didn't seem to do the appropriate update. I just found nth and random under Networking->Networking Support->Networking Options->Network Packet Filtering and they weren't checked.
Will post again tomorrow after attempting another rebuild.
We've also applied this patch for dead gateway detection which seems to improve things somewhat: http://www.ssi.bg/~ja/
Thanks for your help.
These are the values changed:
root@darkstar:/proc/sys/ne
total 0
-rw-r--r-- 1 root root 0 2006-05-25 16:21 error_burst
-rw-r--r-- 1 root root 0 2006-05-25 16:21 error_cost
--w------- 1 root root 0 2006-05-25 16:21 flush
-rw-r--r-- 1 root root 0 2006-05-25 16:21 gc_elasticity
-rw-r--r-- 1 root root 0 2006-05-25 16:21 gc_interval
-rw-r--r-- 1 root root 0 2006-05-25 16:21 gc_min_interval
-rw-r--r-- 1 root root 0 2006-05-25 16:21 gc_min_interval_ms
-rw-r--r-- 1 root root 0 2006-05-25 16:21 gc_thresh
-rw-r--r-- 1 root root 0 2006-05-25 16:21 gc_timeout
-rw-r--r-- 1 root root 0 2006-05-25 16:21 max_delay
-rw-r--r-- 1 root root 0 2006-05-25 16:21 max_size
-rw-r--r-- 1 root root 0 2006-05-25 16:21 min_adv_mss
-rw-r--r-- 1 root root 0 2006-05-25 16:21 min_delay
-rw-r--r-- 1 root root 0 2006-05-25 16:21 min_pmtu
-rw-r--r-- 1 root root 0 2006-05-25 16:21 mtu_expires
-rw-r--r-- 1 root root 0 2006-05-25 16:21 redirect_load
-rw-r--r-- 1 root root 0 2006-05-25 16:21 redirect_number
-rw-r--r-- 1 root root 0 2006-05-25 16:21 redirect_silence
-rw-r--r-- 1 root root 0 2006-05-25 16:21 secret_interval
root@pcgate:/proc/sys/net/
1250
250
cat: flush: Operation not permitted
5
60
0
0
2048
0
10
32768
256
2
552
600
5
9
5120
600
root@darkstar:/proc/sys/ne

Get a FREE t-shirt when you ask your first question.
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
Next time instead of "ls" and "cat *", use "grep . *" it shows filenames with content.
Linux Networking
--
Questions
--
Followers
Top Experts
The variety of Linux distributions creates myriad issues relating to configuration and operations when computers are networked, not the least of which is the use of various network management applications, some of which are included with specific distributions, while others are standalone applications.