similar to: P2P shaping working

Hello, I''ve been trying to shape the bittorrent traffic (on my external interface, upload), but without luck, for this I''m using layer7 filter right now, but I''ve also tried ipp2p, with the same results, I might say that this is not a problem with this packet classifiers, the problem is with HTB, here''s why. When I open azureus (the bittorrent client I

Hello, its me again, I won''t stop sending emails to this list, until I solve this problem, I''ve tried several apps to create the right htb rules (even made them my self), but I always get the same results, traffic gets shaped, but I can''t use my bandwidth, and this is weird, because I should be able to, also I keep seeing download being limited too, and that

Ok, earlier I post a message explaining my problem with HTB and layer7 (or ipp2p), about not being able to shape the traffic. Well, actually this is what''s happening, I''m marking the packets (right now, I''m using ipp2p as Klaus adviced me to) with iptables, and my queue rules are made using tcng, I''m using the HTB qdisc, and traffic is going to the HTB class

Hello, some days ago, I was asking for help here about not able to do anything when I had bittorrent running, I will post the problem here: I''m using ipp2p to mark p2p packets, and then send them with -j CLASSIFY to the correct HTB class, I see traffic in the class when I start azurerus, and traffic does get shaped, but then I''m still not able to surf the web nor chat nor

Hi I believe that whole question is in topic. Is there any way to recognize ( and then shape ) p2p traffic which is encrypted? Modern p2p clients have this ability moreover some of them have this enabled by default. Now I''m using ipp2p for iptables but as I know this doesn''t recognize encrypted traffic. Thanks in advance. Pozdrawiam Szymon Turkiewicz

Hi all, I have been trying to investigate traffic shaping in an effort to solve the "unfriendly network apps" problem on a test network. I have a basis by which I''d like to shape traffic, but studying the howto doesn''t uncover and existing qdisc that seems to fit what I would like to do. The problem I would like to address is to prevent an IP address opening 10

Hello, I'm running centos5. I'm wanting this machine only, none of my other ones, to participate in p2p file sharing, bittorrent, edonkey, maybe other networks. Does anyone have a howto or step by step guide for this? I've installed bittorrent and mldonkey clients, but neither is working, i'm assuming gateway firewall issue, but i've enabled the correct ports, 6881

Hi all, I am running Slackware 10.1 with Kernel 2.6.14.3 includes iptables 1.3.4 with layer 7 My network diagram below: - INTERNET --- LINUX_ROUTER_FW --- PCs Below is my simple iptables script: - echo 1 > /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j MARK --set-mark 1 iptables -t

Hello, Could somebody explain following issue ? I set up htb class on outgoing external interface to shape p2p upload traffic. I limited it to 4Mbit/s. I also set up iptables counters chains in FORWARD chain to calculate traffic generated by p2p and others. While tc stats show that p2p shaping class keep defined 4Mbit traffic, iptables counters show me that p2p traffic exceed traffic to 150%

Hi all, I''m tring to isolate P2P traffic, specifically BitTorrent, for my QoS scripts. I can''t seem to completely isolate ALL BitTorrent traffic. I identify & mark packets and then use tc filters to put them into appropriate classes. My firewall rules (below) do the markings. My VoIP boxes'' and ICMP traffic get highest priority (mark 1). Then comes DNS, SSH,

Hello everyone, I have my centos server running just fine with everything I need... except I can't setup no p2p program (amule, bittorrent, etc). Anyone some hint on which program to use and how to make it run? Thanx Samuel --- andinasoft SA - Software y Consulting --- Mariano Aguilera 216 y Almagro - Quito, Ecuador Tel. +593 2 223 5682 ----- Cel. +593 9 946 4046 ---------

Greetings, I''ve searched, found ftwall, and some other commercial solutions, but am wondering if anyone on this list has any solutions using a linux firewall to block p2p traffic, more specifically Kazaa. Walter Wickersham _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Hey, one more question for ipp2p iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK --restore-mark iptables -t mangle -A DSL-IN -p tcp -m mark ! --mark 0 -j ACCEPT iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j MARK --set-mark 7 iptables -t mangle -A DSL-IN -p tcp -m ipp2p --ipp2p -j CONNMARK --save-mark iptables -t mangle -A DSL-IN -p udp -m ipp2p --ipp2p -j MARK

Hello, I''m using these rules (attached) to control traffic going out from ip 192.168.0.100 which is acting as a p2p server, but when I have these rules on and mldonkey running I experience some latency in web pages, which Iwould like to eliminate. I''ve read that this is where the burst and cburst (even quantum) parameters are useful, but I still can''t understand

Hi, I have a typical configuration for my firewall/gateway box: single network card, with a pppoe connection to the DSL modem. I''m already successfully shaping the uplink (how come that the wondershaper.htb doesn''t use the ceil parameter? It should implement bandwidth borrowing!) but i found the ingress policy a little bit rough. I''d like to keep the traffic categories

Does anyone have any pointers on how other people have implemented tcp window adjustment to do bandwidth shaping? Granted the basic idea is to set the window size to be RTT * bandwidth, but a quick squiz at google turns up mostly papers on how to implement this at the sender end with a view to some new magic TCP implementation. I''m really interested in notes on how to implement at

Hi, I''ve a linux as router nat + firewall (POLICY DROP for INPUT OUTPUT and FORWARD) but, I''ve put next rules for p2p software on FORWARD chain [... snip ... ] iptables -F FORWARD iptables -P FORWARD DROP iptables -A FORWARD -p tcp --dport 80 -j ACCEPT iptables -A FORWARD -p tcp --dport 25 -j ACCEPT [... snip ... ] iptables -A FORWARD -m ipp2p --ipp2p -j ACCEPT iptables -A

Hello, a few days ago I sent an email asking for help with my tc htb rules I''ve got (a script), but I''m not sure if that email got to you... anyway, I''m sending it again along with my htb script and I''ll tell you the problem once again: I have a computer with ip 192.168.0.100 which is acting as a p2p server, so I want to shape traffic coming out from that

Thanks, The only issue here is that for each service I need to create 200 child classes if I have 200 clients... Let me explain the problem better I have the following connection from my ISP: (1024/1024) (rate/ceil) 1) First, I want to divide the 1024 into smaller pieces based on priority: 256/256 - P2P (I want to limit the P2P traffic as much as possible) 256/1024 - HTTP 256/1024 - FTP

Hi there, We''re running a small ISP and all the users are shaped to 384/512/768k both ways (whichever package they choose). The router is a linux (debian sarge), the kernel is 2.4.25 right now. All users are getting 10.1.1.* ip addresses (eth1) and eth0 connects to the isp using ethernet (via a media converter, it''s fiber from there). They''re nat''s using