similar to: HTB

Hi All, I have an asterisk box on my DMZ, and I'm using a PF for my firewall, I can make a call but some reasons I have a dead air. Any Ideas? below are my rules... ext_if = "bce0" int_if = "bce1" altitude = "172.16.1.0/24" #### machines #### vbox = "172.16.1.1" uci = "172.16.1.4" voices = "203.172.x.1" ipc =

Hi ! I have an error in this script as it is not working and I can''t figure out what that is. Anyone can help? Thanks! #!/bin/bash ### unitati de masura pt debit # kbps - kilobytes per second # mbps - megabytes per second # kbit - kilbits per second # mbit - megabits per second EXT_IF="eth0" INT_IF="eth1" TC=/sbin/tc IPTABLES=/sbin/iptables # RATE

I'm trying to use pf + ftp-proxy n a 6.1-PRERELEASE machine. I have this line on inetd.conf: ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy -n And this lines on pf.conf: rdr on $int_if proto tcp from any to any port ftp -> 127.0.0.1 port ftp-proxy pass in quick on $ext_if inet proto tcp from any port ftp-data to $ext_if:0 user proxy flags S/SA keep

Hi Andreas! I mainly understand what you mean, I tried to fix something on the script, I don''t know if I did it well. Can you take another look on it please and if is wrong to make the corrections directly on it so that I see where the mistake is... With this script I want to make limits for IP class 85.120.48.0/25 for international traffic in 256 KBps classes and for metropolitan

Has anybody on this managed to get ChilliSpot and Shorewall to work together? I have managed to get it to work with the supplied firewall script but if I wanted to do my firewall like that I would not be using Shorewall. At any rate, I am having all kinds of trouble translating the supplied rules to something that Shorewall would understand. If anybody has already done it I would love to see the

I try use setup traffic shaping with Shorewall-4.0.2 and have fault. When i start Shorewall with tc-files configured i get follow messages: ... RTNETLINK answers: No such file or directory We have an error talking to the kernel ERROR: Command "tc filter add dev eth2 parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate 500kbit burst 10k drop flowid :1" Failed

Hello! I need to switch from htb2 to htb3, because of speed issues (for me, htb2 is unable to handle more then 100mbit duplex with ~550 classes), kernel profiling shows htb_dequeue_prio at 1st place with 3x isolation. So, I''ve moved from 2.4.19 to 2.4.25 kernel (hi-pac for classification/marking and htb3 for queueing), and traffic rate drop from 100 to 20mbit. What can be wrong? The

Hi ; MY script: tc-htb3 qdisc del dev eth2 root ipchains -F tc-htb3 qdisc add dev eth2 root handle 10: htb default 20 r2q 40 tc-htb3 class add dev eth2 parent 10: classid 10:1 htb rate 50Mbit burst 2000 tc-htb3 class add dev eth2 parent 10:1 classid 10:100 htb rate 12mbit ceil 50mbit prio 1 tc-htb3 class add dev eth2 parent 10:1 classid 10:20 htb rate 38mbit ceil 50Mbit prio 8 ipchains

Hello! I have an internet connection of 64kbps garanteed in a channel of 256kbps. On this connection the metropolitan speed is 10Mbps and in the provider''s network the speed is 100Mbps. I have a few clients behind my linux box and i want to set up some limitations because some of them are using it irrational. I am marking the packets with 0 for internet; 1 for metropolitan 2 for

Hello list, I discover strange behaviour of shaping traffic that i setup from Shorewall-4.0.2. I know that this is not Shorewall problem but may be somebody from list can help me or explain this situation. I have follow interfaces in 'tcdevices' files: #INTERFACE IN-BANDWITH OUT-BANDWIDTH # $EXT_IF 500kbit 248kbit $INT1_IF 500mbit

Hi everyone, My HTB script is showing me those "r2q change" warnings. I read that I should test with r2q values to gain accuracy and stop the warnings but I made some tests with r2q and with burst and I still get the warnings. Any ideas on this issue will be very helpful. The script seems to be working as the bandwidth for the IPs is being shaped. The NIC works at 100mbit and the

Hi,lartc I used iproute-060110 with iptables1.3.4 on gentoo 2005r1 kernel 2.6.14-5. I find some error messages in system logfile: HTB: quantum of class 10001 is big. Consider r2q change. HTB: quantum of class 10010 is big. Consider r2q change. tcf_action_init_1: successfull police HTB: quantum of class 20001 is big. Consider r2q change. HTB: quantum of class 20020 is big. Consider

Hello again, I need to change the R2Q for my script, as setting the quantum manually for each class is painful. Can you tell me exactly where to set R2Q = x? I get syntax errors all the time. Should it be specified for each class? I do not know where to place this setting... Thanks in advance, Vlad Mihai _______________________________________________ LARTC mailing list /

Salut lartc (lartc@mailman.ds9a.nl), 18:12:52 kernel HTB init, kernel part version 3.10 18:12:52 kernel HTB: quantum of class 100001 is small. Consider r2q change. 18:12:52 kernel HTB: quantum of class 100002 is small. Consider r2q change. 18:12:52 kernel HTB: quantum of class 100003 is small. Consider r2q change. 18:12:52 kernel HTB: quantum of class 100004 is small. Consider r2q change.

Hello, after spending several hours reading archives, I decided to write new post. I successfully set up packet classification, made some basic HTB setup, made some simple graphical representation from HTB statistics data... BUT, I cannot figure out how to refine HTB to get this behaviour: I need that class "p2p" should be the last one to get some link capacity. If I set both RATE

Hi all ! I''m building a network appliance whose goals are to enhance Voip quality on 512/128k DSL links. But, i have a voice quality problem, and i think i''m doing something wrong, but i can''t find what. Please excuse my terrible english, i''m french. >From what i''ve read, tc is the tool i need. I read the documentations, readmes and lartc.org

Hello! I''ve been trying to write a traffic shaper for a 128kbit line with this setup : 5 computers that get dedicated bandwidth and the rest go in a pool with bigger priorities. I made the attached script, but it seems it doesn''t work... It sends the traffic coming from the dedicated ips to the default class. Where is the error ? Will this setup work if the bandwidth is

Hi, My system always complain with the warning below : HTB: quantum of class 10099 is small. Consider r2q change. I simply do not understand why... Below my tc commands : /sbin/tc qdisc del dev eth0 root /sbin/tc qdisc add dev eth0 root handle 1 htb default 99 /sbin/tc class add dev eth0 parent 1: classid 1:2 htb rate 128Kbit /sbin/tc class add dev eth0 parent 1:2 classid 1:10 htb rate 80Kbit

Hello i''m having some issues trying to match packets using iptables mark, iproute filter and tc filter.- i mean, when i do iptables -t mangle -A INPUT -p tcp --dport 80 -j MARK --set-mark 20 iptables -t mangle -A PREROUTING -p tcp --dport 25 -j MARK --set-mark 10 iptables -t mangle -A FORWARD -p tcp -i eth0 -o eth1 --dport 25 -j MARK --set-mark 10 $TC qdisc del dev $INET_IFACE root $TC

Hey, I have such a script: tc qdisc add dev $DEV root handle 1:0 htb default 21 r2q 2 tc class add dev $DEV parent 1:0 classid 1:11 htb rate 100mbit tc class add dev $DEV parent 1:11 classid 1:21 htb rate 512kbit ceil 512kbit tc class add dev $DEV parent 1:11 classid 1:23 htb rate 1024kbit ceil 1024kbit tc class add dev $DEV parent 1:11 classid 1:25 htb rate 3072kbit