Dario Lesca
2003-Aug-07 10:49 UTC
[Shorewall-users] The tcrules file Tom''s ''configuration
Where is the tcrules file of Tom''s configurations? at this link http://www.shorewall.net/myfiles.htm I not found it. Another question: If I want to use TC on two interfaces (net and loc) for same service (ftp), I must indicate one or 2 different mark line in to tcrules? Please, help me to setup a server that guaranteed over a HDSL 2Mb a minimal band of 500Kb for download and upload for a FTP service .... Someone can show me some tcstart and tcrules files of examples? Thanks for the great work! and sorry for my bad english :-( ------- Dario Lesca (d.lesca@ivrea.osra.it)
Tom Eastep
2003-Aug-07 10:58 UTC
[Shorewall-users] The tcrules file Tom''s ''configuration
On Thu, 2003-08-07 at 10:48, Dario Lesca wrote:> Where is the tcrules file of Tom''s configurations?I don''t use tcrules for traffic control! I use it for policy routing in conjunction with Squid (http://shorewall.net/Shorewall_Squid_Usage.html): #MARK SOURCE DEST PROTO PORT(S) CLIENT PORT(S) 1:P eth2,eth3 !192.168.0.0/16 tcp 80 For traffic control, I run Wondershaper straight out of the box.> > Another question: > > If I want to use TC on two interfaces (net and loc) for same service (ftp), > I must indicate one or 2 different mark line in to tcrules?No.> > Please, help me to setup a server that guaranteed over a HDSL 2Mb a minimal > band of 500Kb for download and upload for a FTP service .... > > Someone can show me some tcstart and tcrules files of examples?The only examples that I have are in the documentation: http://shorewall.net/traffic_shaping.htm The tcrules file in Example 1 goes with the tcstart script shown on that page. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
Tom Eastep
2003-Aug-07 11:27 UTC
[Shorewall-users] The tcrules file Tom''s ''configuration
On Thu, 2003-08-07 at 10:58, Tom Eastep wrote:> > > > > Another question: > > > > If I want to use TC on two interfaces (net and loc) for same service (ftp), > > I must indicate one or 2 different mark line in to tcrules? > > No. >What I meant is that you don''t need two different entries in tcrules. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
Dario Lesca
2003-Aug-08 03:31 UTC
[Shorewall-users] The tcrules file Tom''s ''configuration
----- Original Message ----- From: "Tom Eastep" <teastep@shorewall.net>> > For traffic control, I run Wondershaper straight out of the box.Ok, therefore in tcstart you have inserted the script wondershaper.htb and, in tail to this, also the command in example. But... Where is the relations from the rule in your tcstart and the three definition: 1) I wanted to allow up to 140kbits/second for traffic outbound from my DMZ... 2) My laptop and local systems could use up to 224kbits/second .... 3) My firewall could use up to 20kbits/second ... Which are the TC options in your example that they concur to distinguish the three types of traffic? Thanks for your reply.... ------- Dario Lesca (d.lesca@ivrea.osra.it)
Tom Eastep
2003-Aug-08 07:24 UTC
[Shorewall-users] The tcrules file Tom''s ''configuration
On Fri, 2003-08-08 at 03:31, Dario Lesca wrote:> ----- Original Message ----- > From: "Tom Eastep" <teastep@shorewall.net> > > > > For traffic control, I run Wondershaper straight out of the box. > > Ok, therefore in tcstart you have inserted the script wondershaper.htb and, > in tail to this, also the command in example.No. I use Wondershaper and that''s all. I used to use the example as tcstart but I REPLACED it with Wondershaper. Again -- I do NOT use either the tcstart or any of the tcrules files shown at http://shorewall.net/traffic_shaping.htm> > But... > > Where is the relations from the rule in your tcstart and the three > definition: > > 1) I wanted to allow up to 140kbits/second for traffic outbound from my > DMZ... > 2) My laptop and local systems could use up to 224kbits/second .... > 3) My firewall could use up to 20kbits/second ...Read the script -- they are part of it. If you want to know about HTB, read the HTB documentation.> > Which are the TC options in your example that they concur to distinguish the > three types of traffic?They are in the "Example 1" tcrules file shown at the above URL. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net