similar to: tweaked shaping rules

In my attempt to move my traffic shaping to my router from an internal box, I have come up with a new set of rules. I would appreciate any feedback the list members might have. What I am trying to do is shape my outbound bandwidth so that my que doesn''t get full. I run a ftp server 24/7, do normal email, some ssh, web surfing and some downloading. I have a cable modem with 10mbit

I am currently running the following script on an internal machine to shape outbound ftp and email traffic. I am trying to move the script to my nat router (ipcop with 2 nic cards) so that it shapes the whole network and not only the outbound of 1 box. I have cable modem -> ipcop (eth1) >(eth0 - 192.168.1.1) > 192.168.1.100 and 192.168.1.101. The scripts works great running on

Hi, I am currently using the following script to shape traffic on my linux box. I am getting ready to move the script to my linux firewall box so it shapes traffic for my home lan. I am looking to refine my rules a bit so to make bandwidth sharing a bit more efficient. Specifically I am looking to give out bound email more priority so that when a large email is sent, I want it to borrow all

Hi, I am currently using a script to shape my outbound ftp traffic. Works great except for 1 thing. When a user goes to list a dir, the listing is also getting shaped. This causes dir listings to be very slow. Is there a way to differentiate the dir listing packets? Here is a my current script: #!/bin/bash #shaping passive and active outbound ftp traffic on an internal computer without

>In theory yes, but it is shaping inbound transfers to my server. >YOu''re not doing any other sort of Ingress filters are you?? No >I dont care about destination port. That line was commented. BUT, incoming transfers are being shaped for some reason. >Could this be shaping on the ISP side?? What >happens when the tc rules >are shut off?? No, everything works fine

Hi, I just wanted to share my script with the list. I have been trying to shape outbound passive and active ftp traffic without affecting inbound and lan transfers. I have tried to do this for a long time and it seems that I have finally figured it out. Feel free to comment on the below script if there is anything that can be improved. It seems to work flawlessly so far. #!/bin/bash

Hi, I am using the following script to limit my outbound traffic. This scipt runs on a box behind my firewall. It limits my outbound passive ftp traffic to 39K perfectly....just like i want. However, i just noticed that it is also limiting uploads coming to my server. Is there something I can change to make it not limit uploads to my server? #!/bin/bash #shaping passive ftp traffic # mark the

>Theory is.. You can only shape outbound traffic. Inbound is via tcp windowshaping etc.. In theory yes, but it is shaping inbound transfers to my server. >> iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 65437 -j MARK --set-mark 20 >> iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 50000:51000 -j MARK --set-mark 20 >> iptables -t mangle -A MYSHAPER-OUT -m mark --mark 0

Hi, I am using the following script to limit my outbound traffic. This scipt runs on a box behind my firewall. It limits my outbound passive ftp traffic to 39K perfectly....just like i want. However, i just noticed that it is also limiting uploads coming to my server. Is there something I can change to make it not limit uploads to my server? #!/bin/bash #shaping passive ftp traffic #

Hi, I am using the following script to limit my outbound traffic. This scipt runs on a box behind my firewall. It limits my outbound passive ftp traffic to 39K perfectly....just like i want. However, i just noticed that it is also limiting uploads coming to my server. Is there something I can change to make it not limit uploads to my server? #!/bin/bash #shaping passive ftp traffic #

Ok, i think i found the problem. The script below seems to be working. I need to do some testing now. Thanks for all the help in here. If anyone has any enhancements, feel free to comment please. #!/bin/bash #shaping passive ftp traffic # mark the outbound passive ftp packets on ports 50000-51000 iptables -t mangle -D POSTROUTING -o eth0 -j MYSHAPER-OUT 2> /dev/null > /dev/null

Well it appears i have no clue what im doing. I thought i had the below script working to shape outbound ftp traffic....however, it is shaping inbound traffic too. I have NO clue why. Please comment if anyone has any ideas why this doesnt work. I want to shape only outbound ftp traffic and not inbound or lan traffic. #!/bin/bash #shaping passive and active outbound ftp traffic on an

Hello! My system is: Internet ADSL(PPPoE) ---> ppp0 [LINUX server(router)] eth0 ---> LAN Server(router) is running on LINUX Slackware 8.1. I have recompiled a 2.4.22 kernel, enabled all QoS support in the kernel config, including HTB. My ADSL bandwidth is 256Kbit/s for download and 64Kbit/s for upload. I use the following HTB+IPTABLES configuration, because I want to reduce bandwith for

Hello...I have a Slackware based machine doing routing & QoS for my internal LAN users... It has two interfaces: eth1(100mbps) that connects to the aDSL modem(USR 9105) and eth0(100mbps) that connects to my local LAN... I''am using shorewall as a firewall...i think it''s configured well as it''s working as i want and i pass all the online firewall tests... :D All lan

I am trying to mark outbound passive ftp traffic with iptables and shape it to 35KBytes. I am using the following script on the computer that runs the ftp server. It is not working correctly, it seems to limit ALL traffic. Cant file share or anything. Anyone might know what is wrong? #!/bin/bash #shaping passive ftp traffic # mark the outbound passive ftp packets on ports 50000-51000

hi there, is there any possible way to control traffic in child??? class with selected protocols for example http i try to use this script but its now working in theory: there is root class 1:0 with subclass 1:2 in class 1:2 all ip adresses have their bandwidth limit 1:{iden} and now i try also control bandwith in this class i.e. if class 1:{iden} have 190kbit i want 95kbit with burst to 190kbit

hi all I just tried to test whether the HTB works well or not .. (policy is very simple ^^;;) I tried HTB simulator ''Ethloop'' with lo (loopback ) and I found HTB works well....(very well) So I changed lo to eth0 and tested .. ./tc qdisc add dev eth0 root handle 1: htb default 10 ./tc class add dev eth0 parent 1: classid 1:1 htb rate 500kbps ceil 500kbps ./tc class add

hi all I just tried to test whether the HTB works well or not .. (policy is very simple ^^;;) I tried HTB simulator ''Ethloop'' with lo (loopback ) and I found HTB works well....(very well) So I changed lo to eth0 and tested .. ./tc qdisc add dev eth0 root handle 1: htb default 10 ./tc class add dev eth0 parent 1: classid 1:1 htb rate 500kbps ceil 500kbps ./tc class add

Hi all I have following script in my server. Now I want to restrict ip 192.168.3.2 to 128kbps (downlink). But in this case client can download upto 500kbps and upload cannot exceed more than 20kbps. Now what should I do to restrict client 192.168.3.2 within 128kbps downlink and 64kbps uplink. tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1:0 htb tc class add dev eth0 parent

dear all iam newbie , i have 256 kbits of down link and 64 kbits of up link iam using squid and htb i have got this while browsing the net , there are some few issues i need help while running the script i want browsing to be as fast as possible , uplink especially kaaza should not eat my band width. eth1 got public ip address and eth0 is internal with network 10.0.0.0/24 iam also using nat