I am no expert on this but your tcrules file is missing.
You need to define those rules so shorewall knows what traffic to mark
On 8/23/2010 11:16, Jonh Jonh wrote:> Traffic Shaping
>
> I try to limit bandwidth, but doesn''t work. Don''t limit
bandwidth
> correctly . I''m using openwrt, shorewall 4.2.4, dasnguardian
2.10.0.3
> and squid 2.6.STABLE14. My configuration is:
>
> shorewall version 4.2.4
>
> Kernel
>
> root@localhost:/etc/shorewall# uname -r
> 2.6.25.20
>
> root@localhost:/etc/shorewall# cat zones
> fw firewall
> loc ipv4
> net ipv4
>
> root@localhost:/etc/shorewall# cat policy
> fw all ACCEPT - -
> loc all ACCEPT - -
> net all DROP - -
> all all REJECT - -
>
> root@localhost:/etc/shorewall# cat masq
> eth0 eth1
>
> root@localhost:/etc/shorewall# cat rules
> ACCEPT net fw tcp 22 - -
> REDIRECT loc 8080 tcp 80 - - - -
> REDIRECT loc 16667 tcp 1863 - - - -
>
> root@localhost:/etc/shorewall# cat tcclasses
> eth1 1 full full 2 default
> eth1 2 5kbit 5kbit 2
>
> root@localhost:/etc/shorewall# cat tcdevices
> eth1 4000kbit 600kbit
>
> atte. Jonh
>
>
>
------------------------------------------------------------------------------
> http://p.sf.net/sfu/intel-atom-d2d
>
>
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
--
from the desk of Nigel
http://soft-focus-imagining.com
http://twin-peaks-video.com
and for the skeptical side of you
http://rational-alchemy.com
------------------------------------------------------------------------------
Sell apps to millions through the Intel(R) Atom(Tm) Developer Program
Be part of this innovative community and reach millions of netbook users
worldwide. Take advantage of special opportunities to increase revenue and
speed time-to-market. Join now, and jumpstart your future.
http://p.sf.net/sfu/intel-atom-d2d