ipset ip_set

  • ipset utility (backport from sid)
  • ipset-patched kernel (2.4.33-bsd33c+)
  • modprobe ip_set
  • ipset -N server ipmap --network 192.168.0.0/16
  • ipset -A server 192.168.16.16
  • ipset -L
    
    
  • iptables -A FORWARD -m set --set server dst,dst -j ACCEPT
    

| ipset ip_set | | 2006.10.19-14:35.00

Traffic shaping - tc filter.. divisor

divisor is a number of entries in given table,
for (h = 0; h <= ht->divisor; h++) {
where h is 'unsigned', this suggests 65535 max, but it seems that in reality it's limited to 255 Apparently, it must be in form of 2^x (1,2,4,8,16...256), otherwise you get:

host:~# tc filter add dev eth1 parent 1: prio 0 handle 1: protocol ip u32 divisor 17
Illegal "divisor"

| Traffic shaping - tc filter.. divisor | | 2006.10.15-00:20.00

 You are scrupulously honest, frank, and straightforward. Therefore you have few friends.