similar to: limiting doesn''t work

Hi All, I''m using iptables-1.2.7a on RedHat8 kernel 2.4.20. I wanted to limit the file-sharing traffic to the internet. I marked the packets with iptables: iptables -A FORWARD -t mangle -p tcp -s 192.168.1.1/24 -d ! 192.168.1.1/24 --dport 1024:1862 -j MARK --set-mark 1 iptables -A FORWARD -t mangle -p tcp -s 192.168.1.1/24 -d ! 192.168.1.1/24 --dport 1864:65535 -j MARK --set-mark 1

here''s the output : # tc -s -d class show dev eth0 class cbq 1: root rate 10Mbit cell 8b (bounded,isolated) prio no-transmit/8 weight 10Mbit allot 1514b level 2 ewma 5 avpkt 1000b maxidle 23us Sent 294 bytes 7 pkts (dropped 0, overlimits 0) borrowed 0 overactions 0 avgidle 605 undertime 0 class cbq 1:10 parent 1:1 leaf 10: rate 100Kbit cell 8b prio 1/1 weight 100Kbit allot 1600b

Hello, I''m using tc to limit the bandwidth of our wireless customers. I have a working script, but I''m not happy with it. I''m trying to write a more sophisticated script, but when I run it, it give me this error: RTNETLINK answers: File exists I have no idea what this error means or how to fix it. Here is a portion of the script (the whole script shapes several

Hi, In my LAN Iam trying to make following setup: - All the traffic generated by 10.0.2.1 should go to 10.0.2.11, If the destination of this traffic is internet than it should be placed on its interface eth1. Outgoing traffic on eth1 should be shaped.For this I am using fw filters and cbq. _______ 10.0.2.1 -------> 10.0.2.11(eth0 )----| A

Hi folks. For quite a while, I tried to use linux (cbq and htb) to control bandwidth in order to replace a cisco equipment used to play this role on our network. After trying here and there, with a bunch of different distros, different versions, different compilations, ... the closest I could get was as follows: (using htb.init and cbq.init) Desired BW ==> Achieved BW 128k ==> 404.78

Sub:[LARTC] cbq init for one port on a subnet Hello, We use cbq.init to limit bandwidth. It works great on a per-user basis. Now I''d like to limit traffic from a netblock to the Internet on port 6699. Network is 192.168.0.160 mask 255.255.255.224 eth0 is the gateway eth1 connects the netblock in question Is this the proper syntax; DEVICE=eth0,10Mbit,1Mbit RATE=100Kbit

I''ve been following the HOWTO, and reading mailing list discussions about throttling bandwidth, and have had some success, but I just want to tie off some loose ends. Essentially what I am wanting to do is to keep our bandwidth usage below 1megabit, because if we go over we get charged for that traffic. I''ve used some of the examples from the HOWTO to limit our bandwidth, but I

Dear List, Sorry for the dublicated email but I couldn''t get any answer. I am trying to limit some IP blocs with tc with following three step. # interface tc qdisc add dev eth0 root handle 1: cbq avpkt 1000 bandwidth 256kbit # class tc class add dev eth0 parent 1: classid 1:1 cbq rate 64kbit \ allot 1500 prio 5 bounded isolated # rules # download tc filter add dev eth0 parent 1:

Hi, I have a question conercing wondershaper. I''m using the Clarkconnect linux distribution for my linux router and I tried to use wondershaper. On start up of wshaper, there are no errors or any other problems but I''m not sure if it''s running correctly. Only one qdisc / one class is used and when I start an uplink ftp transfer, my ping time is growing up to 1700ms - I

How can it be, that class 1:3 in my case borrows, when all sibling classes are isolated ? nessus:~# tc -s -d class show dev eth1 class cbq 1: root rate 100Mbit cell 8b (bounded,isolated) prio no-transmit/8 weight 100Mbit allot 1514b level 2 ewma 5 avpkt 1000b maxidle 1us Sent 484 bytes 7 pkts (dropped 0, overlimits 0) borrowed 0 overactions 0 avgidle 77 undertime 0 class cbq 1:1 parent 1:

Hi, When i do ''wshaper start'' the interface i have defined stops routing traffic for some reason. It resumes routing when i do ''wshaper stop''. I''m using debian stable (3.0 woody) with debian''s default 2.4.18-686 kernel. When I run the script I get no errors, and when I do a ''status'', everything looks correct. Can ANYONE

I need to shape traffic from some IP on one LAN, but I''m in trouble. There is a linux 2.4.26 connected to the Internet (eth0) / LAN(eth1) doing NAT. I''m using VLANs in the LAN Interface, that is connected to a 3Com SuperStack II in a 802.1Q tagged port. I want to create a class that will limit the traffic at 384Kbit/s. I want to create two leaf classes that limit the traffic at

I am using the following commands to restrict download on an interface vm01 /sbin/tc qdisc add dev vm01 root handle 11: cbq bandwidth 100Mbit avpkt 1000 mpu 64 /sbin/tc class add dev vm01 parent 11:0 classid 11:1 cbq rate 1.5Kbit weight 1.5Kbit allot 1514 prio 1 avpkt 1000 bounded /sbin/tc filter add dev vm01 parent 11:0 protocol ip handle 4 fw flowid 11:1 When i do a qdisc show and class show,

Dear List, I am trying to limit some IP blocs with tc with following three step. # interface tc qdisc add dev eth0 root handle 1: cbq avpkt 1000 bandwidth 256kbit # class tc class add dev eth0 parent 1: classid 1:1 cbq rate 64kbit \ allot 1500 prio 5 bounded isolated # rules # download tc filter add dev eth0 parent 1: protocol ip prio 16 u32 \ match ip dst 10.0.1.0/24 flowid 1:1 # upload tc

Hi, I have been modifying the Wonder shaper to include another queue. My understanding was packets would be de queued to hardware in the following order: cbq1 -> sfq10 > sfq20 > sfq30. Also we only move onto the next queue when the preceding one is empty. However is seems to be prio xx number that reflects the order packets are de queued not to what flowid they belong to. If I

Hello all, this is my first post here. Sorry for my english. Gentoo LAN router, 2.4.26-hardened-r2 There are 2 WAN links, one LAN link. I am doing some iptables/routing/tc magic in my scripts. What''s interesting is marking packets traveling from all IP''s in LAN. Interesting commands are: ------------- for ip in `seq 50`; do $IPTABLES -t mangle -A FORWARD -o eth2 -d

Hello, really new to advanced linux routing, but I have managed to setup something that sort of works for my needs. I have a linux box with this configuration: Internet - eth0 - eth1 - many users I''m using a NAT to allow my users Internet access. On some users, I wish to shape their download speeds as to not overload our outside connection. Here is what I do to shape them at 64k

Dear all, I''m having real problems getting tc to do anything useful at all. I''m also under pressure to get this fixed before the students start arriving later this month (I work in a university). In short, I want each IP address to be hard limited to 128kbit down, 64kbit up, never to be allowed more bandwidth than this. It is also important that the latency remains

I have a setup where I have three NIC in a Debian box. I have eth1 conected to internet and eth0 NAT''ed to 192.168.1.1. eth1 and eth2 are bridged together, given ip 192.168.122.2. What I want to achieve is to perform traffic shaping on the bridge as well as prioritizing the traffic from eth0 very low. (This is from trental flat ...) However it seems that I am unable to perform thhe

Hello, it seems, that filtering on nexthdr (TCP/UDP) content, especially src or dst port, is not working. The following has no effect on 2.4.16 or older (even 2.2) kernels: # tc filter add dev eth0 parent ffff: protocol ip prio 50 u32 match tcp dst 3128 0xffff police rate 40kbit burst 10k drop flowid :1 Even if # tc filter ls dev eth0 parent ffff: filter protocol ip pref 50 u32 filter protocol