LARTC - Jun 2005 - IMQ + HTB + little script problem

I want to shape the incoming traffic ( download ) "but using only 
fwmark", i know there are other methods, but i want to use this one 
particularly...

So, first i create DOWNLOAD and mark  with 20 all the traffic with 
destination 10.0.0.3 ( eth1 ) incoming from my internet device ( eth0 ).

#$IPTABLES -t mangle -N DOWNLOAD
#$IPTABLES -t mangle -I PREROUTING -i eth0 -j DOWNLOAD
#$IPTABLES -t mangle -A DOWNLOAD -d 10.0.0.3 -p tcp -m tcp -j MARK 
--set-mark 20
#$IPTABLES -t mangle -A DOWNLOAD -j IMQ --todev 0

Then, i create the QOS rules

$TC qdisc add dev imq0 root handle 1: htb default 10
$TC class add dev imq0 parent 1: classid 1:1 htb rate 128kbit burst 6k
$TC class add dev imq0 parent 1:1 classid 1:10 htb rate 80kbit burst 6k 
prio 1
$TC class add dev imq0 parent 1:1 classid 1:20 htb rate 50kbit burst 6k 
prio 1
$TC qdisc add dev imq0 parent 1:10 handle 10: pfifo
$TC filter add dev imq0 parent 1: protocol ip prio 5 handle 10 fw flowid 
1:10
$TC filter add dev imq0 parent 1: protocol ip prio 6 handle 20 fw flowid 
1:20

This thing does not work. I can''t mark the  packets with 20,  but if i 
remove -d 10.0.0.3, the script marks and works but for all the eth1 
device not only one ip. Any Idea?

s.az wrote:
> I want to shape the incoming traffic ( download ) "but using only 
> fwmark", i know there are other methods, but i want to use this one 
> particularly...
> 
> So, first i create DOWNLOAD and mark  with 20 all the traffic with 
> destination 10.0.0.3 ( eth1 ) incoming from my internet device ( eth0 ).
> 
> #$IPTABLES -t mangle -N DOWNLOAD
> #$IPTABLES -t mangle -I PREROUTING -i eth0 -j DOWNLOAD
> #$IPTABLES -t mangle -A DOWNLOAD -d 10.0.0.3 -p tcp -m tcp -j MARK 
> --set-mark 20
> #$IPTABLES -t mangle -A DOWNLOAD -j IMQ --todev 0
PREROUTING mangle is before de-nat so you won''t see local addresses.
If you really need to use imq then you can get it to hook after 
PREROUTING nat - but you still can''t use marks.

If you only want to shape forwarded traffic then you can do it on eth1 
without needing imq. You could mark or CLASSIFY in FORWARD.

If you classify you don''t need any filters with htb you can do similar 
with mark and an empty fw filter on the root eg.

$TC filter add dev eth1 parent 1: protocol ip prio 5 fw

then a mark 0x10010 would get sent to class 0x1:10

Andy.