Equipment/Church: Difference between revisions
No edit summary |
|||
| Line 18: | Line 18: | ||
* Could this be published on the wiki, as only a limited number of people have access to Church? [[User:Robert|Robert]] 13:19, 24 April 2011 (UTC) | * Could this be published on the wiki, as only a limited number of people have access to Church? [[User:Robert|Robert]] 13:19, 24 April 2011 (UTC) | ||
** I've put the firewall.conf [https://github.com/londonhackspace/networking/blob/master/firewall.conf on Git]. The priorities are 20 (highest)-26 (lowest). [[User:Ms7821|Ms7821]] 01:46, 25 April 2011 (UTC) | |||
==Access== | ==Access== | ||
Revision as of 01:46, 25 April 2011
Our new shiny router, named after Alonzo Church.
It's an Alix 2D3 low-power computer, with a 4GB Compact Flash card, running stock Debian Squeeze.
Firewall/NAT
Set up very simply to iptables-restore /etc/firewall.conf on networking start. To add a new rule, change /etc/firewall.conf and:
iptables-restore < /etc/firewall.conf
Traffic Shaping
We're using a relatively simple traffic-shaping scheme to manage upload bandwidth. Traffic is tagged using fwmark into one of six priority classes in the "shaper" chain in /etc/firewall.conf.
/etc/network/if-up.d/traffic-shaping then configures the traffic shaping (you shouldn't need to touch this and you should tell Russ if you do).
- Could this be published on the wiki, as only a limited number of people have access to Church? Robert 13:19, 24 April 2011 (UTC)
Access
We like stable internet, so we're not going to hand out accounts willy-nilly. If you need a port mapped, ask one of these people:
If you want to do something more fancy, we'll probably give you access as long as you let us know first :).
