Networking :: TC - Limit The Connection From Source Port 6001 To 30KB/s
May 17, 2010
I've searched through the forums and found a few threads that kind of helped, but I'm still pretty lost when it comes to TC. I'm trying to do and also break it down and explain what each part of the command does so that I can learn along the way. What I'm trying to do is limit any connection from source port 6001 to 30KB/s.
I'm currently running a game server and it has no built in bandwidth limiting feature, which means if someone logs in and needs to download the map it destroys my bandwidth for the rest of the servers players. The game server is running on port 6001.
View 6 Replies
ADVERTISEMENT
Jan 11, 2011
I am at a loss how to prevent Denial of Service attacks to port 25 and not block legitimate connections from 2 Barracuda 800(s) and block smart phones such as iPhones/Blackberrys/iPhones that use the server smtp.server.com for email.
Presently for port 25
RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 25 -j ACCEPT
The 2 Barracuda 800(s) make port 25 connections all the time, plus users with smart_phones have the incoming server type:
IMAP
pop.server.com
smtp.server.com
Is there a way to keep Denial of Service attacks from happening with iptables rules without causing blocking to the Barracuda(s) that make constant port 25 connections & smart phones that poll? I was thinking if I allowed the Barracuda(s) in these lines
-s (barracuda)24.xx.xx.xx -d (emailserver)24.00.xx.xx -p tcp -m tcp --dport 25 -m state --state NEW -j ACCEPT
Where the source would be the Barracuda going to the email server. It would be allowed, then I am left with how to allow other connections like Smart_Phones that connect via Port 25. I am thinking if I put rules in place doing connection counts in a minute it would result in errors connecting to the server and people would start complaining. Plus any limiting may result in blocking real traffic. Then would I need to allow the ISP range in the above example to accept port 25, I am still left with how to drop a flood/denial of service attack.
View 4 Replies
View Related
Nov 4, 2010
I need to adjust what exactly ufw LIMIT port# does.I like the fact that the port is getting limited, but ufw overdoes it a bit. Is there a config file somewhere I can edit?
View 5 Replies
View Related
May 20, 2010
I want to put a bandwidth limit on the 8000 port. The limit not have to be global! It must be per connection! For example if i put a 20kB/s limit on the 8000 port and I have 3 clients connected to the port, i want that each have the 20kB/s. How can I do that? I readed something about TC, but i don`t know how to use it... I`m a little noobie Sorry for my bad english
View 7 Replies
View Related
Jan 21, 2011
Me and my friend are using the same internet, sometimes he downloads something or watches a movie online. When he does that my internet connection becomes very weak. So is there any way to put limit on his computer? Like only 30kb/s
View 2 Replies
View Related
Aug 30, 2010
i have an embbeded hardware that uses bootp for booting from a Network Managemnt Host (NMH)on the same ethernet. The embedded hardware has both kind of ports i.e ethernet as well as E1/T1. I would like ask, what do i require to establish a communication-link between the embedded hardware and the NMH throuh E1/T1 ports of embedded hardware, so as to make it boot through from E1/T1. Further, NMH possesses only ethernet port. Just to refine my questions i'd like to know what additions do i need to do on my NMH , like may be i have to put an E1/T1 port or is it possible that the E1/T1 port can be directly connected to an ethernet port on the other host.
pardon me if i am not making absolute sense here as my knowledge is limited on Layer 1 and layer 2.
View 3 Replies
View Related
Mar 29, 2011
I need a program that will limit download speed per connection. So that each download is limited to 100kbit/s for e,g. I tried trickled, it only limits whole application (and doesn't work with firefox). Also tried pyshaper, doesn't work. Is there such software?
View 1 Replies
View Related
Apr 2, 2010
recently i rent a xen vps intended to setup a PPTPD vpn server for me and my friends. so we can by-pass the great firewall in china and get back on ....., facebook and stuff. i have already setup the server and i can connect to it without any problem. but i still want to do some further configuration the server:
1. i want to limit the bandwidth to 400k/s per connection.
2. i also want to limit the max connection per user a/c
i have some thoughts on the 2nd requirement. in the user configuration file of /etc/ppp/chap-secret, you can specify the range of ip the user can get, does it limit the max connection per user a/c? or they can connect anyway, just every now and then a box pop up says conflict in IP address?
View 1 Replies
View Related
Jul 23, 2011
My network isPC1 -- (NIC1,10.1.1.x) Linux (NIC2,10.1.2.x) -- Server 1 (HTTP/FTP)My question isIn the linux system, can I change the PC1 source port from 20000 to 30000? for examplePC1(sport:20000,dport:80)---Linux-- (sport:30000,dport:80)--- Server 1 (HTTP/FTP)
View 2 Replies
View Related
Jun 23, 2011
I am currently having an issue attempting to set up a dedicated server for source games (TF2, CS:S, L4D2). The required port (27015), along with most others, appears closed to the rest of the world and upon a port scan with DMZ hosting on (therefore no router interference between the internet and my computer) only a few ports are open (80, 139, 443, 445). My ISP does not block ports so therefore the only issue I can find is with my computer running Ubuntu 11.04. I have ensured that all traffic is allowed via iptables and I can't think of anything else that would have ports closed.
View 9 Replies
View Related
Oct 31, 2010
I have a server (192.168.1.9) in my network that is running a http server on port 5000. This server port have been opened (on my router 192.168.1.1) to be available from my public IP (on port 80).
I have recently installed openvpn to connect to a vpn, but I'd like to keep my http server available from my public IP (no need to have it available to the VPN network).
I'm completely lost and I don't know where to start ...
Here are some details about the route configuration :
Code:
View 7 Replies
View Related
Mar 4, 2011
I get a connection refused error whenever I attempt to connect to a remote ssh server, I tried the test at and it says outbound ssh port 22 is not being blocked. I'm wondering what else could be the problem.
View 3 Replies
View Related
Dec 21, 2010
having a port 22:connection refused problem with SSH. None of what I have read has been what I have been experiencing, so I figured I would post here. The worst that could happen is this gets completely ignored, or I am told that there is already a solution, that I missed it, and directed to it. Here is my problem:
Just learned how to ssh into my machine a few days ago. Everything has been running smoothly until I ran into a little problem: all of a sudden I can't connect anymore. I have sshd-server installed and updated. I have sshd turned on
Code:
/sbin/service sshd start
And I even ran:
Code:
/etc/init.d/sshd start
Because I was told that it would start ssh from boot. Nothing has changed from today and yesterday and I haven't been having problems with port 22 being blocked.
I have also tried to ssh into the machine by the machine itself:
Code:
ssh <IP of machine>
with the same error.
View 4 Replies
View Related
Dec 11, 2010
I cannot use GRsync from Ubuntu Desktop to PCLinuxOS laptop.The 2 computers can ping each other. I have disabled both firewalls. My laptop IP address is 192.168.1.11This is the error on Ubuntu Grsync:
ssh: connect to host 192.168.1.11 port 22: Connection refused
rsync: connection unexpectedly closed (0 bytes received so far) [sender]
rsync error: error in rsync protocol data stream (code 12) at io.c(601) [sender=3.0.7]
Rsync process exit status: 12
On PCLinuxOS it wont say Ethernet is connected when trying a static address setup.However it does connect to the internet via auto Ethernet setup and a LAN cable. It then says connected. In order to use SSH and GRsync what programs are required? I have these installed on both machines: grsync openssh-client openssh-server
View 5 Replies
View Related
Oct 20, 2009
Hello. I want to use my Debian box as an internet connection for a Win95 laptop. The laptop is old enough that the only port I have available to connect to the internet from is the serial port. I have heard that a serial port redirector will allow it to access the internet through my debian box, but I have no clue how to set one up. Any advice. Thanks
View 3 Replies
View Related
May 26, 2010
I'm running IPF on solaris 10 Note :i believe the idea will be the same it doesn't matter either its linux or solaris
Code:
bash-3.00# ipf -V #display ipf version
ipf: IP Filter: v4.1.9 (592)
[code]....
View 9 Replies
View Related
Jun 15, 2011
I am facing trouble to scp from server to to my local machine where as the vice-vesra is working fine.
The error is like below.
lost connection
View 4 Replies
View Related
Nov 27, 2010
I have my desktop computer (running F13) configured to accept ssh over port 22 via the firewall configuration tool. If I type ifconfig -a, this computer, which is running on my wireless network, tells me:
Code:
inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0
However, if I go to my laptop computer (also running F13) and try and ssh into the desktop, i.e. ssh icthy@192.168.1.100, I get this response:
Code:
ssh: connect to host 192.168.1.100 port 22: Connection refused.
I guess I am confused to what is blocking the connection? Is there another means on F13 other than the default Firewall? I haven't really messed with the network at all. For what it's worth, I am hoping to set things up so I can just ssh into the computer name, (ssh icthy@desktop) eventually, but want to start with the IP. So, can anyone offer a hint as to what I can look for that is blocking port 22?
View 3 Replies
View Related
Jul 29, 2010
I have a Windows machine on which NX Client has been installed. I wanted to test if I could access my Ubuntu box. The Ubuntu Box has NX Server, Node and Client installed. When I try to log in from the Windows machine using NX Client with my Ubuntu username and password I get an error connection refused.
The following service is running: OpenBSD Secure Shell server sshd How can I resolve the issue?
View 3 Replies
View Related
Feb 19, 2011
I have had a look at the the information on the ubuntu forum about this but am having trouble getting the server to do what i want it to do.
I have a VPS running ubuntu 9.10 and i am trying to set it up to redirect port 25 to a remote machine via a VPN connection (remote machine connected via VPN)
i have tried setting this up in the firewall using webmin but it is not working.
View 3 Replies
View Related
Sep 5, 2010
How to number of connections for a single ip on port 80 to CentOS 5.5 with iptables? connlimit did not work on CentOS and nginx does not provide a module for that
View 4 Replies
View Related
Jul 15, 2011
i want if a port (exp. 1001) have 20 connections that the next new connection forword to an other port (exp. 1002).
View 2 Replies
View Related
Apr 6, 2010
i am running ncat (netcat's new version from nmap) on centos . I am listening on different ports. My question is , is it possible that when a connection is received on a port say 123, i redirect this connection to a different port and use the 123 port again for listening connections. ncat has an option -k which u can add with -l , it will force fully listen on the port. It can accept multiple connections on a single port but i want that once a client connects on to 123 port, he is forwarded to some other port and no longer on 123.
View 4 Replies
View Related
Jan 12, 2010
I can telnet (while on the actual machine) using
Quote:
telnet localhost 25
When I try and use the local machine's ip
Quote:
telnet 192.168.100.9 25
I get
Quote:
Trying 192.168.100.9...
telnet: Unable to connect to remote host: Connection refused
[Code].....
This last one is strange as I the IP looks odd.
What I am doing wrong, and how do I fix it. After much surfing many mosts say that telnet is not used anymore but I want to use it to test my smtp server.
View 9 Replies
View Related
Sep 2, 2010
what I have: Belkin G Wireless Router Model F5D7234-4. To attempt to get Subsonic working, I changed the port forwarding settings (Belkin calls it Virtual Servers) to forward port 4040 to my desktop computer. I then saved changes, and my wireless disconnected. I waited about 3 minutes, and nothing was happening, so I restarted my router. This left me in the position that I am in now. Even when the router and modem are fully booted, the router does not broadcast my SSID. In addition, a wired connection will not connect to the network through the router. This leaves me completely unable to use wireless, and unable to change any settings in the router.
View 3 Replies
View Related
May 4, 2011
I have installed ubuntu 11.04 and I'm now trying to connect to existing SUSE servers on the LAN. My home directory has a shared NFS mounted home on the SUSE servers while my home on the ubuntu machine is local. I can log in using ssh to all the SUSE servers except one. I get:
ssh: connect to host srv3 port 22: Connection refused
If I use the IP address of srv3 directly it works. Also, before I changed the default machine name ("ubuntu") I could log into srv3.
nslookup srv3 works OK.
ping srv3 works OK.
Even if I completely delete the .ssh directory in both my ubuntu home and in my shared home on the SUSE servers I still cannot log in using the srv3 name, only direct IP address works. I'm thinking that the login I did to srv3 before I changed the machine name for the ububtu machine must have goofed up something
View 2 Replies
View Related
May 30, 2011
I'm fairly sure that this is an Ubuntu issue, as I've tried this on my windows computer with success.I'm running a minecraft server on my laptop, previously over a wireless connection but the data rates were too slow. On a wired connection, however, the server starts up and runs like normal but the port is not open when accessing from the network's public IP. I tested this with canyouseeme(.)org. I can get to it from other computers within the network by using a local IP, which to me seems a little strange as it seems to indicate that the port is open on the PC but somewhere in the router it gets confused due to being wired(?). Obviously I've forwarded the ports on the router (BTHomehub 2.0) with both TCP and UCP (it worked over wireless!). Any suggestions as to what might be causing this? I'm stumped.
View 5 Replies
View Related
Oct 6, 2010
while my brother was browsing the web on my windows partition he had a blue screen pop up, one of the soft/hardware error ones, not a true BSOD, anyways, ever since my lan port on the computer seems to not be activiating as no wired connection is recognized. The lan port/card is directly attached to the Mother Board, it's a gigabyte motherboard in a self-build computer. I'm just wondering if there's anything I can do to troubleshoot this and see if it is truly a hardware problem or if its something else.
View 9 Replies
View Related
Dec 23, 2010
I'm trying to limit access to port 8443 on our server to 2 specific IP addresses. For some reason, access is still being allowed even though I drop all packets that aren't from the named IP addresses. The default policy is ACCEPT on the INPUT chain and this is how we want to keep it for various reasons I wont get into here. Here's the output from iptables -vnL
[Code]...
Note the actual IP we are using is masked here with 123.123.123.123. Until I can get everything working properly, we're only allowing access from 1 IP instead of 2. We can add the other one once it all works right. I haven't worked with iptables very much. So I'm quite confused about why packets matching the DROP criteria are still being allowed.
View 10 Replies
View Related
Feb 18, 2010
I want to do a simple port redirect, i.e. whatever comes trough whatever interface on port AAAA will get redirected to port BBBBI thought that iptables -t nat -I PREROUTING --source 0/0 --destination 0/0 -p tcp --dport AAAA -j REDIRECT --to-ports BBBBhowever it doesn't work, e.g. nc -v -w2 -z localhost AAAA gives:
nc: connect to localhost port AAAA (tcp) failed: Connection refused
while
nc -v -w2 -z localhost BBBB
[code]....
View 10 Replies
View Related
