similar to: revised shaping rules, please take a look

I wanted to post my new shaping rules which I am running on my IPCOP router. They seem to be working very well so far. Any comments to my setup would be appreciated. #!/bin/bash # clear out the chain and setup a new chain iptables -t mangle -D OUTPUT -o eth1 -j BW-OUT 2> /dev/null > /dev/null iptables -t mangle -F BW-OUT 2> /dev/null > /dev/null iptables -t mangle -X BW-OUT 2>

I am currently running the following script on an internal machine to shape outbound ftp and email traffic. I am trying to move the script to my nat router (ipcop with 2 nic cards) so that it shapes the whole network and not only the outbound of 1 box. I have cable modem -> ipcop (eth1) >(eth0 - 192.168.1.1) > 192.168.1.100 and 192.168.1.101. The scripts works great running on

Hi, I am currently using a script to shape my outbound ftp traffic. Works great except for 1 thing. When a user goes to list a dir, the listing is also getting shaped. This causes dir listings to be very slow. Is there a way to differentiate the dir listing packets? Here is a my current script: #!/bin/bash #shaping passive and active outbound ftp traffic on an internal computer without

Hi, I am currently using the following script to shape traffic on my linux box. I am getting ready to move the script to my linux firewall box so it shapes traffic for my home lan. I am looking to refine my rules a bit so to make bandwidth sharing a bit more efficient. Specifically I am looking to give out bound email more priority so that when a large email is sent, I want it to borrow all

Hi, I have tried unsuccesfully to limit my ftp server send speed in linux. I have an ipcop linux firewall/router with 2 nics. 1 nic (eth1) is connected to a 3mbit/384Kbit cable connection and the other (eth0) a switch. Behind it i have a suse linux box and a windows box. On the suse box i run proftpd. I need to shape my passive ftp send speed to 34KBytes because if it is maxed out at 45K

>In theory yes, but it is shaping inbound transfers to my server. >YOu''re not doing any other sort of Ingress filters are you?? No >I dont care about destination port. That line was commented. BUT, incoming transfers are being shaped for some reason. >Could this be shaping on the ISP side?? What >happens when the tc rules >are shut off?? No, everything works fine

I am trying to mark outbound passive ftp traffic with iptables and shape it to 35KBytes. I am using the following script on the computer that runs the ftp server. It is not working correctly, it seems to limit ALL traffic. Cant file share or anything. Anyone might know what is wrong? #!/bin/bash #shaping passive ftp traffic # mark the outbound passive ftp packets on ports 50000-51000

Hi, I am trying to figure out how to shape the following marked packets and limit them to a speed on 30KBytes. I have read the documentation but I am unsue of what to do. iptables -t mangle -A FTP-OUT -p tcp --dport 50000:51000 -j MARK --set-mark 1 Mark _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc

>Theory is.. You can only shape outbound traffic. Inbound is via tcp windowshaping etc.. In theory yes, but it is shaping inbound transfers to my server. >> iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 65437 -j MARK --set-mark 20 >> iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 50000:51000 -j MARK --set-mark 20 >> iptables -t mangle -A MYSHAPER-OUT -m mark --mark 0

Well it appears i have no clue what im doing. I thought i had the below script working to shape outbound ftp traffic....however, it is shaping inbound traffic too. I have NO clue why. Please comment if anyone has any ideas why this doesnt work. I want to shape only outbound ftp traffic and not inbound or lan traffic. #!/bin/bash #shaping passive and active outbound ftp traffic on an

Hi, I am using the following script to limit my outbound traffic. This scipt runs on a box behind my firewall. It limits my outbound passive ftp traffic to 39K perfectly....just like i want. However, i just noticed that it is also limiting uploads coming to my server. Is there something I can change to make it not limit uploads to my server? #!/bin/bash #shaping passive ftp traffic # mark the

Ok, i think i found the problem. The script below seems to be working. I need to do some testing now. Thanks for all the help in here. If anyone has any enhancements, feel free to comment please. #!/bin/bash #shaping passive ftp traffic # mark the outbound passive ftp packets on ports 50000-51000 iptables -t mangle -D POSTROUTING -o eth0 -j MYSHAPER-OUT 2> /dev/null > /dev/null

I am trying to mark outbound passive ftp traffic with iptables and shape it to 35KBytes. I am using the following script on the computer that runs the ftp server. It is not working correctly, it seems to limit ALL traffic. Cant file share or anything. Anyone might know what is wrong? It seems that I might need to add a ''lan limit'' so all traffic that is not marked still

Hi, I am using the following script to limit my outbound traffic. This scipt runs on a box behind my firewall. It limits my outbound passive ftp traffic to 39K perfectly....just like i want. However, i just noticed that it is also limiting uploads coming to my server. Is there something I can change to make it not limit uploads to my server? #!/bin/bash #shaping passive ftp traffic #

Hi, I am using the following script to limit my outbound traffic. This scipt runs on a box behind my firewall. It limits my outbound passive ftp traffic to 39K perfectly....just like i want. However, i just noticed that it is also limiting uploads coming to my server. Is there something I can change to make it not limit uploads to my server? #!/bin/bash #shaping passive ftp traffic #

Hi all, I''m new to using iproute2 for traffic shaping but not new to Linux. Essentially I have a WAN between two cities that I stream audio over for rebroadcast. Since it''s all done live stability and prioritization is critical in staying on air for our radio broadcasts. My WAN is 1.5Mbit PVC within my provider''s infrastructure so I have an unencrypted direct

Hello! I have a small home network and I''d like to use traffic shaping because every time someone uploads a file at full speed, my download speed drops to ~10 KB/s. My connection is 768/128 DSL. I found a script at http://www.knowplace.org/shaper/examples.html $TC qdisc add dev $INTERFACE root handle 1: htb default 60 $TC class add dev $INTERFACE parent 1: classid 1:1 htb rate 116kbit

Hello List, I use HTB in a ~80 users serving router with kernel 2.4.20. eth0 is the internet interface (half-duplex 1Mbit), eth1 the internal interface (100Mbit full duplex) cause of the fact that the router also serves as a http-proxy (squid) i thought setting up the default class on eth1 with the real upload-speed (100Mbit) would do the job, i.e. shaping normal stuff to 1Mbit except local

Hi, I''m trying to perform some (what I consider) basic traffic shaping on our network utilising HTB. I have mostly reused the example on the lartc.org site: tc qdisc add dev eth0 root handle 1: htb default 10 tc class add dev eth0 parent 1: classid 1:1 htb rate 100mbit burst 24k tc class add dev eth0 parent 1:1 classid 1:10 htb rate 50mbit ceil 80mbit burst 19k tc class add dev eth0

Hi, I have a basic router that is shaping traffic, and it seems to be working at the moment. We have a 100Mbit connection to the internet, however we get charged for each mbit that we use and so have to shape/limit the traffic to avoid huge bills and my boss getting cross!! We have a /29 subnets set up as follows: tc qdisc add dev eth0 root tbf rate 0.8Mbit latency 50ms burst 10k tc qdisc add