timy's questions

I have an Ubuntu 20 machine as an internet gateway with two WANs ens160 and ens192. I switch the default route on the gateway like ip r re 0/0 dev160(or ens192) and the clients on the LAN access the web without any problem. But if I want to let a specific user through the specified WAN, such as

ip ru add from 192.168.3.60 lookup 100
ip r a 0/0 dev ens192 t 100

client 192.168.3.60 has an issue accessing some web resources like images, looks like a TCP MSS problem, but iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -o ens192 -j TCPMSS --clamp-mss-to-pmtu can't fix it.

Can anyone offer some help?

Replaced a bad /dev/hdb, and try to rebuild the raid1, but something wrong like:

dmraid -dddvvv -R isw_chgadgfjjg_raid1 /dev/sdb
WARN: locking /var/lock/dmraid/.lock
WARN: missing dm serial file for /dev/dm-0
WARN: missing dm serial file for /dev/dm-1
WARN: missing dm serial file for /dev/dm-2
WARN: missing dm serial file for /dev/dm-3
WARN: missing dm serial file for /dev/dm-4
WARN: missing dm serial file for /dev/dm-5
WARN: missing dm serial file for /dev/dm-6
WARN: missing dm serial file for /dev/dm-7
WARN: missing dm serial file for /dev/dm-8
WARN: missing dm serial file for /dev/dm-9
NOTICE: /dev/dm-9: asr     discovering
NOTICE: /dev/dm-9: ddf1    discovering
NOTICE: /dev/dm-9: hpt37x  discovering
NOTICE: /dev/dm-9: hpt45x  discovering
NOTICE: /dev/dm-9: isw     discovering
NOTICE: /dev/dm-9: jmicron discovering
NOTICE: /dev/dm-9: lsi     discovering
NOTICE: /dev/dm-9: nvidia  discovering
NOTICE: /dev/dm-9: pdc     discovering
NOTICE: /dev/dm-9: sil     discovering
NOTICE: /dev/dm-9: via     discovering
NOTICE: /dev/dm-8: asr     discovering
NOTICE: /dev/dm-8: ddf1    discovering
NOTICE: /dev/dm-8: hpt37x  discovering
NOTICE: /dev/dm-8: hpt45x  discovering
NOTICE: /dev/dm-8: isw     discovering
NOTICE: /dev/dm-8: jmicron discovering
NOTICE: /dev/dm-8: lsi     discovering
NOTICE: /dev/dm-8: nvidia  discovering
NOTICE: /dev/dm-8: pdc     discovering
NOTICE: /dev/dm-8: sil     discovering
NOTICE: /dev/dm-8: via     discovering
NOTICE: /dev/dm-7: asr     discovering
NOTICE: /dev/dm-7: ddf1    discovering
NOTICE: /dev/dm-7: hpt37x  discovering
NOTICE: /dev/dm-7: hpt45x  discovering
NOTICE: /dev/dm-7: isw     discovering
NOTICE: /dev/dm-7: jmicron discovering
NOTICE: /dev/dm-7: lsi     discovering
NOTICE: /dev/dm-7: nvidia  discovering
NOTICE: /dev/dm-7: pdc     discovering
NOTICE: /dev/dm-7: sil     discovering
NOTICE: /dev/dm-7: via     discovering
NOTICE: /dev/dm-6: asr     discovering
NOTICE: /dev/dm-6: ddf1    discovering
NOTICE: /dev/dm-6: hpt37x  discovering
NOTICE: /dev/dm-6: hpt45x  discovering
NOTICE: /dev/dm-6: isw     discovering
NOTICE: /dev/dm-6: jmicron discovering
NOTICE: /dev/dm-6: lsi     discovering
NOTICE: /dev/dm-6: nvidia  discovering
NOTICE: /dev/dm-6: pdc     discovering
NOTICE: /dev/dm-6: sil     discovering
NOTICE: /dev/dm-6: via     discovering
NOTICE: /dev/dm-5: asr     discovering
NOTICE: /dev/dm-5: ddf1    discovering
NOTICE: /dev/dm-5: hpt37x  discovering
NOTICE: /dev/dm-5: hpt45x  discovering
NOTICE: /dev/dm-5: isw     discovering
NOTICE: /dev/dm-5: jmicron discovering
NOTICE: /dev/dm-5: lsi     discovering
NOTICE: /dev/dm-5: nvidia  discovering
NOTICE: /dev/dm-5: pdc     discovering
NOTICE: /dev/dm-5: sil     discovering
NOTICE: /dev/dm-5: via     discovering
NOTICE: /dev/dm-4: asr     discovering
NOTICE: /dev/dm-4: ddf1    discovering
NOTICE: /dev/dm-4: hpt37x  discovering
NOTICE: /dev/dm-4: hpt45x  discovering
NOTICE: /dev/dm-4: isw     discovering
NOTICE: /dev/dm-4: jmicron discovering
NOTICE: /dev/dm-4: lsi     discovering
NOTICE: /dev/dm-4: nvidia  discovering
NOTICE: /dev/dm-4: pdc     discovering
NOTICE: /dev/dm-4: sil     discovering
NOTICE: /dev/dm-4: via     discovering
NOTICE: /dev/dm-3: asr     discovering
NOTICE: /dev/dm-3: ddf1    discovering
NOTICE: /dev/dm-3: hpt37x  discovering
NOTICE: /dev/dm-3: hpt45x  discovering
NOTICE: /dev/dm-3: isw     discovering
NOTICE: /dev/dm-3: jmicron discovering
NOTICE: /dev/dm-3: lsi     discovering
NOTICE: /dev/dm-3: nvidia  discovering
NOTICE: /dev/dm-3: pdc     discovering
NOTICE: /dev/dm-3: sil     discovering
NOTICE: /dev/dm-3: via     discovering
NOTICE: /dev/dm-2: asr     discovering
NOTICE: /dev/dm-2: ddf1    discovering
NOTICE: /dev/dm-2: hpt37x  discovering
NOTICE: /dev/dm-2: hpt45x  discovering
NOTICE: /dev/dm-2: isw     discovering
NOTICE: /dev/dm-2: jmicron discovering
NOTICE: /dev/dm-2: lsi     discovering
NOTICE: /dev/dm-2: nvidia  discovering
NOTICE: /dev/dm-2: pdc     discovering
NOTICE: /dev/dm-2: sil     discovering
NOTICE: /dev/dm-2: via     discovering
NOTICE: /dev/dm-1: asr     discovering
NOTICE: /dev/dm-1: ddf1    discovering
NOTICE: /dev/dm-1: hpt37x  discovering
NOTICE: /dev/dm-1: hpt45x  discovering
NOTICE: /dev/dm-1: isw     discovering
NOTICE: /dev/dm-1: jmicron discovering
NOTICE: /dev/dm-1: lsi     discovering
NOTICE: /dev/dm-1: nvidia  discovering
NOTICE: /dev/dm-1: pdc     discovering
NOTICE: /dev/dm-1: sil     discovering
NOTICE: /dev/dm-1: via     discovering
NOTICE: /dev/dm-0: asr     discovering
NOTICE: /dev/dm-0: ddf1    discovering
NOTICE: /dev/dm-0: hpt37x  discovering
NOTICE: /dev/dm-0: hpt45x  discovering
NOTICE: /dev/dm-0: isw     discovering
NOTICE: /dev/dm-0: jmicron discovering
NOTICE: /dev/dm-0: lsi     discovering
NOTICE: /dev/dm-0: nvidia  discovering
NOTICE: /dev/dm-0: pdc     discovering
NOTICE: /dev/dm-0: sil     discovering
NOTICE: /dev/dm-0: via     discovering
NOTICE: /dev/sda: asr     discovering
NOTICE: /dev/sda: ddf1    discovering
NOTICE: /dev/sda: hpt37x  discovering
NOTICE: /dev/sda: hpt45x  discovering
NOTICE: /dev/sda: isw     discovering
NOTICE: /dev/sda: isw metadata discovered
NOTICE: /dev/sda: jmicron discovering
NOTICE: /dev/sda: lsi     discovering
NOTICE: /dev/sda: nvidia  discovering
NOTICE: /dev/sda: pdc     discovering
NOTICE: /dev/sda: sil     discovering
NOTICE: /dev/sda: via     discovering
NOTICE: /dev/sdb: asr     discovering
NOTICE: /dev/sdb: ddf1    discovering
NOTICE: /dev/sdb: hpt37x  discovering
NOTICE: /dev/sdb: hpt45x  discovering
NOTICE: /dev/sdb: isw     discovering
NOTICE: /dev/sdb: jmicron discovering
NOTICE: /dev/sdb: lsi     discovering
NOTICE: /dev/sdb: nvidia  discovering
NOTICE: /dev/sdb: pdc     discovering
NOTICE: /dev/sdb: sil     discovering
NOTICE: /dev/sdb: via     discovering
DEBUG: _find_set: searching /dev/sdb
DEBUG: _find_set: not found /dev/sdb
DEBUG: _find_set: searching isw_chgadgfjjg
DEBUG: _find_set: not found isw_chgadgfjjg
DEBUG: _find_set: searching isw_chgadgfjjg_raid1
DEBUG: _find_set: searching isw_chgadgfjjg_raid1
DEBUG: _find_set: not found isw_chgadgfjjg_raid1
DEBUG: _find_set: not found isw_chgadgfjjg_raid1
NOTICE: added /dev/sda to RAID set "isw_chgadgfjjg"
NOTICE: dropping unwanted RAID set "isw_chgadgfjjg_raid1"
DEBUG: freeing devices of RAID set "isw_chgadgfjjg_raid1"
DEBUG: freeing device "isw_chgadgfjjg_raid1", path "/dev/sda"
DEBUG: freeing devices of RAID set "isw_chgadgfjjg"
DEBUG: freeing device "isw_chgadgfjjg", path "/dev/sda"
ERROR: either the required RAID set not found or more options required
no raid sets and with names: "/dev/sdb"
WARN: unlocking /var/lock/dmraid/.lock

googled it and have no luck, how can I fix this?

On my Linux box, I got a tun0 dev by ipip like:

tun0      Link encap:IPIP Tunnel  HWaddr   
          inet addr:10.10.10.2  P-t-P:10.10.10.1  Mask:255.255.255.255

and I running a ipsec vpn server(ipsec-tools) on this box, how can I route all vpn traffic through the dev tun0 on the server, (like Openswan's leftnexthop ).

my vpn client got ip address like 10.9.0.1.

I have two chians:

Chain OUTPUT (policy ACCEPT 68688 packets, 12M bytes)
 pkts bytes target     prot opt in     out     source               destination         
  146 54635 MARK       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:6532 MARK set 0xfffc 
  146 54635 MARK       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:6532 MARK set 0x5 

When I iptables -t mangle -m connmark --mark 0x5 -Z it will zero both 0xfffc and 0x5's counter, how to only reset the 0x5 chain's bytes counter?

I want to limit my linux server port 8080 at speed 500KB/s, can I do this with iptables?

I have many frontends in haproxy, I plan to log each frontend to different file, for example, frontend a to /var/log/a.log, b to /var/log/b.log, but haproxy's log facility must be one of the 24 standard syslog facilities, is possible to do this?

I can use 31 chars chain name in Debian 6 (iptables 1.4.8), but in Ubuntu 11 (iptables 1.4.10), I can't... Is it possible to let Ubuntu support 30+ chars chain name?

I have a chain appended with many rules like:

> :i_XXXXX_i - [0:0]
> -A INPUT -s 282.202.203.83/32 -j i_XXXXX_i 
> -A INPUT -s 222.202.62.253/32 -j i_XXXXX_i 
> -A INPUT -s 222.202.60.62/32 -j i_XXXXX_i 
> -A INPUT -s 224.93.27.235/32 -j i_XXXXX_i 
> -A OUTPUT -d 282.202.203.83/32 -j i_XXXXX_i 
> -A OUTPUT -d 222.202.62.253/32 -j i_XXXXX_i 
> -A OUTPUT -d 222.202.60.62/32 -j i_XXXXX_i 
> -A OUTPUT -d 224.93.27.235/32 -j i_XXXXX_i

when I try to delete this chain with:

iptables -X XXXX

but got error like (tried iptables -F XXXXX before):

iptables: Too many links.

Is there a easy way to delete the chain by once command?