similar to: class exceeds its ceil

Hi, I''ve a linux as router nat + firewall (POLICY DROP for INPUT OUTPUT and FORWARD) but, I''ve put next rules for p2p software on FORWARD chain [... snip ... ] iptables -F FORWARD iptables -P FORWARD DROP iptables -A FORWARD -p tcp --dport 80 -j ACCEPT iptables -A FORWARD -p tcp --dport 25 -j ACCEPT [... snip ... ] iptables -A FORWARD -m ipp2p --ipp2p -j ACCEPT iptables -A

Hey, one more question for ipp2p iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK --restore-mark iptables -t mangle -A DSL-IN -p tcp -m mark ! --mark 0 -j ACCEPT iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j MARK --set-mark 7 iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK --save-mark iptables -t mangle -A DSL-IN -p udp -m ipp2p --ipp2p -j MARK

Hi all, I am running Slackware 10.1 with Kernel 2.6.14.3 includes iptables 1.3.4 with layer 7 My network diagram below: - INTERNET --- LINUX_ROUTER_FW --- PCs Below is my simple iptables script: - echo 1 > /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j MARK --set-mark 1 iptables -t

Hello, I''ve been trying to shape the bittorrent traffic (on my external interface, upload), but without luck, for this I''m using layer7 filter right now, but I''ve also tried ipp2p, with the same results, I might say that this is not a problem with this packet classifiers, the problem is with HTB, here''s why. When I open azureus (the bittorrent client I

Does anyone here implement traffic shaping with shorewall? I need to shape BitTorrent traffic on my network so that upload/downloads do not overwhelm normal function or, even more importantly, my imminent conversion to VOIP for all telephone service. I followed the shorewall documentation guide but am not sure if what I have done is the Right Way Of Doing Things. Nor am I satsified with the

Hi all, based on the information in the "Linux Advanced Routing & Traffic Control HOWTO", I was trying to set up traffic shaping on my firewall. While I found the HOWTO very useful, in the process I ran into some problems that I did not forsee: According to the HOWTO it seems that it should have worked, even after spending some time going through the sections looking for answers,

Hi all, I just recently began using HTB to try and manage bandwidth for my network. This is the script I''m using: /sbin/iptables -t mangle -A FORWARD -o eth1 -s ! 192.168.244.2 -j MARK --set-mark 53 tc qdisc add dev eth1 root handle 1: htb default 20 tc class add dev eth1 parent 1: classid 1:1 htb rate 100mbit burst 131072k quantum 59000 tc class add dev eth1 parent 1:1 classid 1:10

Hi I have the following problem: I''ve created qos script which shapes traffic on outgoing interface eth1. More - less it looks like this : ------------------------CUT------------------------------------------------------ #root qdisc and class for eth1 $tc qdisc add dev eth1 root handle 1:0 htb default 19 $tc class add dev eth1 parent 1:0 classid 1:1 htp ratel ${CEIL_UP}kbit ceil

I''m using HFSC to limit bandwidth for our wireless customers. However, I''d also like the bandwidth prioritized based on packet type. This is what I''m trying right now, and I''d just like some input from anyone out there knowledgeable in this on whether it does what I want it to do: Eth1 -> HFSC ........|-> HFSC (User1) (Min 512 Kb, Max 1024 Kb, Burst 1536

I''ve applied julian''s paches to a 2.6.14 gentoo kernel with the appropiate options enabled, and i''m using a modified version of the mpath2.sh script also available on julian''s site http://www.ssi.bg/~ja/ Overall everything works nearly perfectly. Incomming connections to either the fios (PPPoE) connection, or cable modem get routed back out correctly. The

Could whomever is in charge of the lartc mailing list please change it to add the header: Reply-To: lartc@mailman.ds9a.nl Every other list I''m on is setup so that by default replies will go to the list. When replying to lartc emails I notice myself and others constantly forgetting this list does not behave like the rest, and that we have to either do a reply-to-all, or manually enter in

Hi all, I''ve not been able to find an explanation of the relationship between prio and rate as they apply to the HTB technique. Hopefully someone on here will be able to help me. As I understand things, when prio values are assigned to an HTB setup, classes with a given prio value will only be serviced when there are no packets waiting in classes with a lower prio value. Now, does

Hi, my situation: One internet connection 256 kbps uplink/downlink, pretty stable speed, a Linux router with three NICs (one to ISP, one to DMZ and one with VLANs enabled to our LAN). Each of three VLANs (1, 10, 11) is a region for me; id 1 gets guaranteed 128 kbps, id 10 and 11 both get guaranteed 64 kbps (both uplink and downlink). Simple configuration. After I read relevant parts of lartc

Hello I am using htb (krenel 2.6.14.3 + esfq patch from fatooh.org) to limit the bandwidth. But I want the absolute maximum rate to be for example 5Mbit and not to exceed it. here is the script: $tc qdisc add dev ${NETIF} root handle 1 htb r2q 4 $tc class add dev ${NETIF} parent 1: classid 1:21 htb rate 5Mbit ceil 5Mbit $tc class add dev ${NETIF} parent 1:21 classid 1:101 htb rate 2Mbit ceil

Hello, its me again, I won''t stop sending emails to this list, until I solve this problem, I''ve tried several apps to create the right htb rules (even made them my self), but I always get the same results, traffic gets shaped, but I can''t use my bandwidth, and this is weird, because I should be able to, also I keep seeing download being limited too, and that

Hi, I wanted to implement some QOS on my Linux Box with HTB, but after some time spend on the configuration and tests, I still don''t manage to have some correct results. Here are the details : -ROOT 2000 kbits -HIGHPRIO SUBCLASS 50 kbits prio 0 -SUBCLASS1 750 kbits prio 1 -SERVICE1 250 kbits prio 1

Hi, I''ve failed miserably in my endeavours so far and I''m at the point where help would be much appreciated. I want to have 3 bandwidth limited classes on my Internet interface. In each of those classes I want 3 prioritization bands, and then use "tc filters" to place the traffic into the correct class and priority. The problem is that the traffic

Hello all, I''ve been trying to test HTB performance for different link bandwidths to find potential limits and this is what I have so far: http://home.comcast.net/~msethuraman/htbtest/ Can members please go over the setup, test procedure and the results and answer a few questions? 1. Is the testing methodology okay and can the results be considered accurate? If so, is this a decent

Hello I have some rules inserted in the NAT table dual SNAT and DNAT for a connection They use at some moment the same port of the outside network. The problem i have is that the connection tracking in the kernel checks first the oldest rule and then the newest one. I use a system based on ARM XScale processor. Is that the default behaviour and how can i change this behaviour? Marius

Hello, First of all, I already contacted Martin Devera, the developer of HTB, and he told me to search for help on this mailinglist, thus I am describing my problems here now... I am kind of seriously annoyed by QoS as I have been trying for over 3 years to get it working properly - first I did not understand how it works, then it seemed not to work, then it was working perfectly for half a