similar to: traffic shaping , where?

Hi folks, So, I have a pretty simple setup - a linux router machine running as a firewall/router for a small neighborhood LAN (approx 20 machines). I also have squid running on the box in non-transparent mode, and also I have set up NAT for TCP/UDP ports above 1024 for all clients and SSH/POP/SMTP/CVS NAT''d for selected ones based on MAC filtering. No hosts whatsoever can access ports 80

Hi list, I have read the lartc 9th chapter, the bandwidth management part. I think I understand the principle, but I have a question. So I have a firewall that has several different interfaces. The most important for my question is the Internet interface, which is a 2mbps leased line. I have an interface into the protected network, I have a DMZ interface, and I have an interface with direct

Sorry for the long descritpion of the problem, I''d like to know If I misunderstand something or if I meet an intrinsic limit of my setup. 217.58.51.162 HDSL eth1 - SRV_XP: 192.168.254.10 eth0: 192.168.254.1 -----+------------------+------- 81.121.243.250 ADSL eth3 - I want to allow incoming pptp request (port 1723) to be forwarded to srv_xp

Hello. I have a pretty strange problem with routing and iptables mark. My firewall has a classic 3 NIC config: one nic connected to the ISP routers, one network for DMZ and the third network for my private network. Here is the schema: HUB HDSL router----+----ADSL router | | HDSL IP---eth0---ADSL IP | | +-------+------+ | | | | | | | | |

Hi All, I''m using Shorewall 3.0.4 and I''m wondering if it is possible to do traffic shapping on only one interface from a bridge. The firewall has got 3 NIC, eth0, eth1, eth2. eth0 and eth2 are bridged, but if I''m right, when you specify a traffic rate for a link, you do it for the interface. In my case, eth0 and eth2 do not appear in the interface file, but it is

Hello Is it possible to shape incoming traffic for local linux users ? Iptables can mark packets created from certain pid/uid/gid. Is there a way to do the same for packets _destined_ for some pid/uid/gid so that I can later shape them with IMQ ? Thanks in advance Dimitris Kotsonis _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl

Hello everybody. I would like to enable QoS on the internal firewall NIC (eth2) to prevent bandwidth saturation from ftp downloads (for example). This is my firewall schema. ___ private network (100bit/s FD) / / /\ | / //\\ |/ || |eth2 \\ |

Hi, I''m trying to use Shorewall (3.0.6) to accomplish what I thought was going to be fairly simple. Unfortunately, I can''t get the dmz to work correctly, and I''m getting martians logged against the interface at issue. Any help I could get would be greatly appreciated! A picture of my physical setup is attached. I have also attached a shorewall dump. To make a long

OK. Now I show my ignorance. What's the difference between a T-1 and a channelised T-1? I see that Covad's voip service (formerly GoBeam) requires a channelised T-1. Then I read recently on the list that many T-1s being installed are actually HDSL....which would be not a T-1 at all...right? Michael -- Michael Graves mgraves@pixelpower.com Sr. Product Specialist

Hi all, I'm currently getting my Centos working as a proxy (squid) on a 2 Mb bandwidth plan that's serving 20 users. it's all good though our need for speed is increasing by the day. soon enough i'll be serving up to 60 user, hence the need to get higher bandwidth though here where the problem is. as i'm using HDSL, 2 Mb is the highest plan available. hence, i need

I try use setup traffic shaping with Shorewall-4.0.2 and have fault. When i start Shorewall with tc-files configured i get follow messages: ... RTNETLINK answers: No such file or directory We have an error talking to the kernel ERROR: Command "tc filter add dev eth2 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 500kbit burst 10k drop flowid :1" Failed

Hi, I wished to shape the traffic that cross my ppp0 interface so I asked around and google''d a bit and I headed in the LARTC HOWTO. As stated in the early in the text, as the title implies, that is an "Advanced" HOWTO and while by no means rocket science, some prior knowledge is assumed. Unfortunately I found myself lost very soon and I''m writing here in hope

I''ve followed this list for quite a long time and have even posted a couple of times. I used the early versions of IMQ from Devik (I think that was his name), and it worked well. I only ever got the chance to implement it in my test environment. I now need to implement it in my production environment. My Linux core router has nine interfaces and has a 27 megabit connection to the

Just some stuff that was laying around in CVS: 1. Added ''DNAT-'' target. 2. Print policies in ''check'' command. 3. Added CLEAR_TC option. 4. Added SHARED_DIR option. [teastep@wookie Shorewall]$ cat releasenotes.txt This is a minor release of Shorewall that has a couple of new features. New features include: 1) A new ''DNAT-'' action has been

Hi, I''ve a router configuration with a dsl connection and two ethernet NICs. How can I control the traffic of the dsl connection when then destination of the traffic can go out of the router using two diferent interfaces? ppp -- router --- lan | DMZ I''ve read that the solution could be IMQ, but i prefer to not to patch kernel and iptables. Any

Hi all, I have a problem with a new Shorewall box I''m trying to migrate from iptables rules to shorewall 2.2.0. I have a 3 interfaces setup: - eth0 ---> internet (ip address) - eth1 ---> remote office (10.0.0.0/8) - eth2 ---> lan (192.168.16.0/24) I''m using a very simple and common setup, with just a few DNAT rules in my /etc/shorewall/rules file, and about twenty

Hello All, I''ve search the documentation of shorewall, But I didn''t find any document about traffic shaping in ipv6. I want to do a per-ip traffic shaping of ipv6.  TIA -- -Budiwijaya- ------------------------------------------------------------------------------ AppSumo Presents a FREE Video for the SourceForge Community by Eric Ries, the creator of the Lean Startup

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings all, Working in concert with the original authors, Klaus Rechert and Patrick McHardy, I have translated their article "HFSC Scheduling mit Linux" [0] on Hierarchical Fair Service Curve (HFSC) into English [1]. http://linux-ip.net/tc/hfsc.en/ Although the original content is not available directly from their website,

I''m looking for a way to shape all traffic on a virtual vlan interface, say eth1.100 to a max of 100mbit. The box is a quagga router with eth0 on the inside and vlan interfaces on the eth1 card to our upstream partners. Each partner has his own vlan on eth1. I tried shaping but was only able to shape outbound traffic on the eth1.100 interface. Inbound shaping was also possible, but

I am working on traffic shaping using the nextenso proxy platform(a product of alcatel)on linux platform, I wish to do dynamic traffic shaping means on a fly, is that possible with TCNG?? With Warm Regards, Aruna Baghel "Gratitude can transform common days into thanksgivings, turn routine jobs into joy, and change ordinary opportunities into blessings."