From: Justin Piszcz <jpiszcz@lucidpixels.com>
To: thunder7@xs4all.nl
Cc: Avuton Olrich <avuton@gmail.com>,
linux-kernel@vger.kernel.org, linux-raid@vger.kernel.org
Subject: Re: 2.6.19.2, cp 18gb_file 18gb_file.2 = OOM killer, 100% reproducible
Date: Sun, 21 Jan 2007 12:08:38 -0500 (EST) [thread overview]
Message-ID: <Pine.LNX.4.64.0701211208310.15334@p34.internal.lan> (raw)
In-Reply-To: <20070121170249.GA19956@amd64.of.nowhere>
On Sun, 21 Jan 2007, thunder7@xs4all.nl wrote:
> From: Justin Piszcz <jpiszcz@lucidpixels.com>
> Date: Sun, Jan 21, 2007 at 11:48:07AM -0500
> >
> > What about all of the changes with NAT? I see that it operates on
> > level-3/network wise, I enabled that and backward compatiblity support as
> > well, but when my iptables rules kick in, it says no such driver/etc for
> > `nat'-- is there a new target for iptables now or did I miss a kernel
> > option?
> >
>
> Well, I'm typing this on my laptop, connected via my main server to the
> internet, using SNAT, according to the firehol manpage. The main server
> runs 2.6.20-rc5, and somewhere in my 2.6.20-rc5 .config, there is
>
> CONFIG_NF_NAT=m
> CONFIG_NF_NAT_NEEDED=y
> CONFIG_IP_NF_TARGET_MASQUERADE=m
> CONFIG_IP_NF_TARGET_REDIRECT=m
> CONFIG_IP_NF_TARGET_NETMAP=m
> CONFIG_IP_NF_TARGET_SAME=m
> CONFIG_NF_NAT_SNMP_BASIC=m
> CONFIG_NF_NAT_PROTO_GRE=m
> CONFIG_NF_NAT_FTP=m
> CONFIG_NF_NAT_IRC=m
> CONFIG_NF_NAT_TFTP=m
> CONFIG_NF_NAT_AMANDA=m
> CONFIG_NF_NAT_PPTP=m
> CONFIG_NF_NAT_H323=m
> CONFIG_NF_NAT_SIP=m
>
> and my firewall's manpage says:
>
> FIREHOL.CONF(5) User Contributed Perl Documentation FIREHOL.CONF(5)
>
>
> masquerade [reverse | interface] [optional rule parameters]
>
> Masquerading is a special from of SNAT (Source NAT) that changes the
> source of requests when they go out and replaces their original
> source when replies come in. This way a Linux box can become an
> internet router for a LAN of clients having unroutable IP addresses.
> Masquerading takes care to re-map IP addresses and ports as required.
>
> Masquerading is "expensive" compared to SNAT because it checks the IP
> address of the ougoing interface every time for every packet, and
> therefore it is suggested that if you connect to the internet with a
> static IP address, to prefer SNAT.
>
> while my /etc/firehol/firehol.conf has a part in it like this:
>
> #
> # route access from the clients to the internet
> #
> router internet2network inface adsl outface switch
> masquerade reverse
> client all accept
>
> All in all, NAT is working for me with 2.6.20-rc5. I do remember I had
> to reselect all the netfilter modules in menuconfig.
>
> Good luck,
> Jurriaan
> --
> > What does ELF stand for (in respect to Linux?)
> ELF is the first rock group that Ronnie James Dio performed with back in
> the early 1970's. In constrast, a.out is a misspelling of the French word
> for the month of August. What the two have in common is beyond me, but
> Linux users seem to use the two words together.
> seen on c.o.l.misc
> Debian (Unstable) GNU/Linux 2.6.20-rc5 2x2011 bogomips load 0.83
> the Jack Vance Integral Edition: http://www.integralarchive.org
> -
> To unsubscribe from this list: send the line "unsubscribe linux-raid" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
Thanks, I'll give it another go in a bit!
Justin.
next prev parent reply other threads:[~2007-01-21 17:08 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-01-20 20:20 Justin Piszcz
2007-01-20 20:45 ` Avuton Olrich
2007-01-20 21:03 ` Justin Piszcz
2007-01-20 21:24 ` Justin Piszcz
2007-01-21 15:52 ` thunder7
2007-01-21 15:54 ` Justin Piszcz
2007-01-26 17:49 ` Adrian Bunk
2007-01-26 17:50 ` Justin Piszcz
2007-01-21 16:48 ` Justin Piszcz
2007-01-21 17:02 ` thunder7
2007-01-21 17:08 ` Justin Piszcz [this message]
2007-01-21 17:29 ` 2.6.19.2, cp 18gb_file 18gb_file.2 = OOM killer, 100% reproducible (multi-threaded USB no go) Justin Piszcz
2007-01-22 6:33 ` Greg KH
2007-01-22 10:56 ` Justin Piszcz
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Pine.LNX.4.64.0701211208310.15334@p34.internal.lan \
--to=jpiszcz@lucidpixels.com \
--cc=avuton@gmail.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-raid@vger.kernel.org \
--cc=thunder7@xs4all.nl \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®