Shorewall users - Oct 2005 - Shorewall traffic shaping, getting confused....

R. van Twisk wrote:
> 
> After that I get lost...
> The example on
> 
> Show''s me this setup: http://www1.shorewall.net/IPP2P.html
You should be looking at http://www1.shorewall.net/3.0/IPP2P.html -- it
has a lot more information about what is going on and how it relates to
tc4shorewall.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Hey list and possible Arne...

I try to get traffic shaping working on my firewall but getting cunfused 
with settings, but first my current setup:

tcclasses file:
#INTERFACE      MARK    RATE    CEIL    PRIORITY        OPTIONS
$EXT_IF         10      64kbit  full    1               
tcp-ack,tos-minimize-delay
$EXT_IF         20      full/3  full/2  2               default
$EXT_IF         30      8kbit   16kbit  3
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

For now I want tree marks,
10: For ssh trafic that needs fast response
20 All default trafic
30 Peer 2 peer trafic

tcdevices:
#INTERFACE    IN-BANDWITH      OUT-BANDWIDTH
$EXT_IF         512kbit         256kbit
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

$EXT_IF is actually eth0

###############################################################################
#MARK           SOURCE          DEST            PROTO   PORT(S) CLIENT  
USER    TEST
#                                                       PORT(S)
RESTORE:P       -               -               tcp
CONTINUE:P      -               -               tcp     -       -       
-       !0
30:P            -               -               ipp2p   ipp2p
SAVE:P          -               -               tcp     -       -       
-       30
1:12           -               eth0            tcp     -       -       
-       30
2:12           -               eth1            tcp     -       -       
-       30
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE


What I understand is this:

Line 1 &2  Are used to make sure that I won''t remark anything that
is
already marked
Line 3 Matches all my ipp2p traffic (could be any kinda traffic I think...)
Line 4 Saves the mark on my connection
Untill so far I understand what''s happening

After that I get lost...
The example on

Show''s me this setup: http://www1.shorewall.net/IPP2P.html
1:12 - eth0 - - - - 1
2:12 - eth1 - - - - 1


This is what I don''t understand:
where does 1:12 come from, where does the 12 come from and the test 1...

I translated that in my setup to:
1:12           -               eth0            tcp     -       -       
-       30
2:12           -               eth1            tcp     -       -       
-       30

I think this means to do QoS on eth1 and eth0  but I obviosly this 
doesn''t work....



anybody can give me a hand with this setup, or have some examples?

cheers,
Ries van Twisk


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl