On Mon, Aug 04, 2014 at 10:06:43AM -0700, Eric Fort wrote: The majority of the traffic through amprgw is what is known as IBR ("internet background radiation") and consists primarily of probes, orphan responses, backscatter, and other miscellaneous traffic that has nothing to do with the intentional ham radio related traffic. We filter much of the IBR out and don't pass it to the tunnels so people don't wind up paying for useless bandwidth consumption. We pass the filtered-out IBR to a local host for scientific analysis. The tunnels are fed only those packets which match their subnet address ranges ANDed with DNS-registered host addresses to minimize the amount of IBR sent down the tunnels. A one-minute sample that I just took shows about 500 kB of traffic went through amprgw to and from tunnels, whilst some 475 MB of IBR was filtered out. It's not clear how much of the outbound tunnel traffic is ham-related, since IBR addressed to the proper ranges will go down the tunnels to the gateway endpoints. If you're interested, the outbound tunnel filter rule is: ip from not 10.0.0.0/8,172.16.0.0/12,169.254.0.0/16,192.168.0.0/16 \ to table(1) in not dst-port 135-139,445,1025-1028 where table 1 is the ANDed list of host addresses. - Brian

I have a bugle on mine, just as it crashes it plays taps for me :) Sent with AquaMail for Android http://www.aqua-mail.com On August 4, 2014 1:44:48 PM Bill Vodall <wa7nwp(a)gmail.com> wrote: