Hello all, Probably a silly problem as a result of lack of understanding here, but I''m having some trouble with a supposedly simple shaping script here. I have a bunch of IPs on an interface tun0 (VPN clients) which I''m trying to rate limit to 5Mbps default, and then set externally by a script to 1Mbps or 10Mbps. All traffic goes out of eth0 from the clients - no routeback. Shaping doesn''t seem to be working correctly (user''s upload is ~250KB/sec + when it''s meant to be rate limited to 1Mbps - ip ending .6 - the corresponding class id is 1:6 in the below/attached logs) Here''s my tc script: ### tun0 setup tc qdisc add dev tun0 root handle 1: htb default 99 tc class add dev tun0 parent 1: classid 1:1 htb rate 100mbit tc class add dev tun0 parent 1:1 classid 1:99 htb rate 100mbit ### eth0 setup tc qdisc add dev eth0 root handle 1: htb default 99 tc class add dev eth0 parent 1: classid 1:1 htb rate 100mbit tc class add dev eth0 parent 1:1 classid 1:99 htb rate 100mbit ### shaping for users, 5Mbps down, 5Mbps up. default for beta test for q in `seq 2 30` ; do d=`printf "%x" $q` ### tun0 tc class add dev tun0 parent 1:1 classid 1:$q htb rate 5Mbit tc filter add dev tun0 protocol ip parent 1:0 prio 1 u32 match ip dst 208.100.21.$q flowid 1:$q ### eth0 tc class add dev eth0 parent 1:1 classid 1:$q htb rate 5Mbit tc filter add dev eth0 protocol ip parent 1:0 prio 1 u32 match ip src 208.100.21.$q flowid 1:$q done attached is the output of "tc -s -d class show dev tun0" and "tc -s -d class show dev eth0", as well as "tc -s -d filter show dev eth0" (they were fairly long). [root@chi01-050-05 shorewall]# tc -s -d qdisc show dev eth0 qdisc htb 1: r2q 10 default 99 direct_packets_stat 29 ver 3.17 Sent 1749531575 bytes 2569426 pkts (dropped 0, overlimits 875543 requeues 0) backlog 3p [root@chi01-050-05 shorewall]# tc -s -d qdisc show dev tun0 qdisc htb 1: r2q 10 default 99 direct_packets_stat 1 ver 3.17 Sent 750893493 bytes 1188097 pkts (dropped 1575, overlimits 334927 requeues 0) Several users were using Bittorrent at the time - including .6. Can anyone shed some light on how best to fix this problem, or any additional information you may need? Thank you, Jan _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc