Hi, I configured Traffic Shaping/Control but unfortunately does not work. User from 10.0.0.40 gets full bandwidth. Why? In Mangle Table I see that the packages are marked. configuration and logs: http://grzechu.eu.org/shorewall/ ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Grzesiek wrote:> Hi, > > I configured Traffic Shaping/Control but unfortunately does not work. > User from 10.0.0.40 gets full bandwidth. Why? In Mangle Table I see > that the packages are marked. >Your OUT-BANDWIDTH is only 115kbit yet you are allowing 10.0.0.40 up to 200kbit! What do you expect? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Sorry, I change it for test: ppp0 1 5*full/10 full 1 tcp-ack,tos-minimize-delay ppp0 2 30kbit 35kbit 2 default ppp0 3 10kbit 20kbit 3 but it also does not work, 10.0.0.40 full speed and others hosts to. 2008/7/12 Tom Eastep <teastep@shorewall.net>:> Grzesiek wrote: >> >> Hi, >> >> I configured Traffic Shaping/Control but unfortunately does not work. >> User from 10.0.0.40 gets full bandwidth. Why? In Mangle Table I see >> that the packages are marked. >> > > Your OUT-BANDWIDTH is only 115kbit yet you are allowing 10.0.0.40 up to > 200kbit! What do you expect? > > -Tom > -- > Tom Eastep \ Nothing is foolproof to a sufficiently talented fool > Shoreline, \ http://shorewall.net > Washington USA \ teastep@shorewall.net > PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key > > > ------------------------------------------------------------------------- > Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! > Studies have shown that voting for your favorite open source project, > along with a healthy diet, reduces your potential for chronic lameness > and boredom. Vote Now at http://www.sourceforge.net/community/cca08 > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Grzesiek wrote:> Sorry, I change it for test: > > ppp0 1 5*full/10 full 1 tcp-ack,tos-minimize-delay > ppp0 2 30kbit 35kbit 2 default > ppp0 3 10kbit 20kbit 3 > > but it also does not work, 10.0.0.40 full speed and others hosts to.How are you testing it? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
> How are you testing it?1. # shorewall restart ( restart the server does not help ) 2. ssh 10.0.0.40 3. wget http://sunsite.icm.edu.pl/pub/Linux/distributions/centos/5.2/isos/i386/CentOS-5.2-i386-bin-1of6.iso squid is off, direct connection. ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Grzesiek wrote:>> How are you testing it? > > 1. # shorewall restart ( restart the server does not help ) > 2. ssh 10.0.0.40 > 3. wget http://sunsite.icm.edu.pl/pub/Linux/distributions/centos/5.2/isos/i386/CentOS-5.2-i386-bin-1of6That is a DOWNLOAD -- your traffic shaping configuration is on ppp0 which I assume is your internet interface. That shapes UPLOADS! If you want to shape downloads to 10.0.0.40, then you need to configure traffic shaping on the your firewall''s lan interface. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Tom Eastep wrote:> That is a DOWNLOAD -- your traffic shaping configuration is on ppp0 which I > assume is your internet interface. That shapes UPLOADS! If you want to shape > downloads to 10.0.0.40, then you need to configure traffic shaping on the > your firewall''s lan interface.wow! UPLOAD from 10.0.0.40 is 30 kb/s. UPLOAD work. How do I reduce DOWNLOAD from the Internet? My lan iterface is eth0. I do not understand this. ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Grzesiek wrote:> Tom Eastep wrote: > >> That is a DOWNLOAD -- your traffic shaping configuration is on ppp0 which I >> assume is your internet interface. That shapes UPLOADS! If you want to shape >> downloads to 10.0.0.40, then you need to configure traffic shaping on the >> your firewall''s lan interface. > > wow! UPLOAD from 10.0.0.40 is 30 kb/s. UPLOAD work. How do I reduce > DOWNLOAD from the Internet? My lan iterface is eth0. I do not > understand this.You do it the same way that you did it on ppp0. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Tom Eastep wrote:> You do it the same way that you did it on ppp0.OK, thanks! ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Grzesiek wrote:> Tom Eastep wrote: >> You do it the same way that you did it on ppp0. > > OK, thanks!I''ve added a simple example at http://www1.shorewall.net/traffic_shaping.htm#Downloads -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Tom Eastep wrote:> I''ve added a simple example at > http://www1.shorewall.net/traffic_shaping.htm#DownloadsI thought that the traffic DOWN / UP set up on one interface (ppp0). I configured output eth0 (LAN) and it works. My English is weak. Therefore, I configured it so slowly. Thank you very much for your help. IT WORKS! :) ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08
Grzesiek wrote:> Thank you very much for your help. IT WORKS! :)You are welcome. Glad to hear that you got it working. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08