similar to: iptables mangle table PREROUTING rule with -o flag

Folks, I''m so surprised what happened to my box just in the few weeks lately. Here is my setup: INTERNET <----------> [eth0] SHAPER-BOX [eth1] <----------> USER-FARM both eth0 & eth1 got public ips (202.x.x.x) Why traffic monitored at eth0 is bigger than eth1 ? eth1 shaped just exactly the same as rate i defined in HTB. I just have 1024Kbps from my ISP and i defined the

Hi all, my IMQ device works OK (thanks to Andy Furniss), but now I''ve problems to attach the traffic in the qdisc''s. This is my conf: ----------------------------------------------------------------------- INET | |eth0 300Kbps ROUTER (NAT) |eth1 | LAN ----------------------------------------------------------------------- MAX=300 tc qdisc add dev imq0 root handle 1: htb

Hi ! I have a single host which is connected via an 512kbit ADSL link to the n= et. I quite often use some realaudio application that uses some bandwidth = and I want to avoid other traffic to scale that bandwidth down. So I used = some classes (with htb) on imq0 device and applied some filters and it see= ms to work in most cases. However, there are some sites with which downloa= d is

i''m trying to limit upload and download but something is wrong(it is about NAT) i will post here my "script" maybe someone could tell me what is wrong my kernel(2.6.9) is patch with imq(linuximq.net) and my iptables(1.2.11) also #flush tc qdisc del dev eth0 root tc qdisc del dev eth1 root tc qdisc del dev imq0 root tc qdisc del dev imq1 root ifconfig imq0 down

Hi! I have read all informations i could find, but some things are still not clear. My setup is: ---INTERNET1(eth0)-\ /- Local net1 (eth2) GW ---INTERNET2(eth1)-/ \- Local net2 (eth3) I have NAT and a working setup using HTB,SFQ, classifying with the iptables -j CLASSIFY way. I shape only the traffic coming from the internet heading to the intranet. I would like

I try to shape traffic using HTB and mark packets within iptables using PREROUTING. But the filterrules seems to ignore the marks set with PREROUTING Only POSTROUTING marks are accepted. First my configuration I have a router connected to the internet via ADSL over interface ppp0. eth0 is a tunnel to ppp0 and eth1 serves the LAN. LAN is 192.168.57.0/24 on 10Mbit ppp0 is 80.126.16.44 on

Hi all, I want to divide the incoming traffic between what should go to the firewall and what should be forwarded to the local network behind it. I started with the IMQ example config, but added an extra htb class right below "10:1" to get the two sfq''s to borrow each other''s bandwidth. However, I can''t figure out how to set the two marks. According to this

Hello there! I was reading this archive: http://mailman.ds9a.nl/pipermail/lartc/2002q3/004725.html It was almost two years ago when Patrick wrote a patch to switch IMQ with nat in PREROUTING chain... From www.linuximq.org I''ve downloaded newset IMQ driver for 2.4.26 and what can i see? The line that Patrick changed in that patch is still as it was in previous relases. Are there

Hello to all people there . Can i guarantee ICMP respond time no metter how loaded is internet line . i have typical NATed enviroiment like External IP |linux router| LAN - 192.168.0.0/24 i have example setup with IMQ but is it possible to be done also if i attache htb to eth0 and eth1 for example . if i start shaper ping i better that without shaper but it''s not guarantted i mean

Hey Andreas, how i catch this traffic using L7 filter?, i´ve installed l7 filter now, but i don´t kwnow to use the kind of filter...!!! Can you help me? Thx.- Terraja-based 2007/4/29, lartc-request@mailman.ds9a.nl <lartc-request@mailman.ds9a.nl>: > > Send LARTC mailing list submissions to > lartc@mailman.ds9a.nl > > To subscribe or unsubscribe via the World

Hi all and tc Gururs i have patched the IMQ and htb to kernel, but when i do egress filtering, iam not able to see any traffic and excusted the following the commands modprobe imq numdevs=1 tc qdisc add dev imq0 handle 1: root htb default 1 tc class add dev imq0 parent 1: classid 1:1 htb rate 100kbit tc qdisc add dev imq0 parent 1:1 handle 10: htb default 1 tc class add dev imq0 parent

Hello I have a server with a dsl connection on eth1 and local interface eth0. Because of the NAT i cannot direct traffic to IMQ device in PREROUTING chain but have to use INPUT and FORWARD. So i use rules. iptables -t mangle -A INPUT -i eth1 -j IMQ --todev 0 iptables -t mangle -A FORWARD -i eth1 -j IMQ --todev 0 And now the strange thing: FORWARD traffic gets directed nicely to the IMQ, but

Hello, I wrote a simple traffic shaping script (below) that should have allowed me to shape my internet traffic a bit (ppp0 - adsl 128kbit/64kbit; local interface eth0). The script works only partially - the speed is being limited but too much. Without running this script my download rate is about 10kBytes (with second computer also downloading at about 6kBytes). After running it my download speed

I''ve followed this list for quite a long time and have even posted a couple of times. I used the early versions of IMQ from Devik (I think that was his name), and it worked well. I only ever got the chance to implement it in my test environment. I now need to implement it in my production environment. My Linux core router has nine interfaces and has a 27 megabit connection to the

hi stef oone more pb while shaping incoming traffic with imq .this one tc qdisc add dev imq0 root handle 1: htb default 20 tc class add dev imq0 parent 1: classid 1:1 htb rate 2mbit burst 15k tc class add dev imq0 parent 1:1 classid 1:10 htb rate 1mbit tc class add dev imq0 parent 1:1 classid 1:20 htb rate 1mbit tc qdisc add dev imq0 parent 1:10 handle 10: pfifo tc qdisc add dev imq0 parent

Witam I''ve found many examples where packets are redirected to IMQ device in PREROUTING chain for ingress traffic shaping purposes. But is there any sense in redirecting packets to IMQ in FORWARD chain also for ingress traffic shaping purposes? -- Pozdrawiam Marcin mailto:slacklist@op.pl _______________________________________________ LARTC

Hi folks, I`ve a problem to use HTB and SFQ. The first script, below, to show a simple configuration, does work fine...!!! But, in the second example, does not work, becouse i put more code to clasify the traffic by protocol, http and ftp in this case. Somebody can tell me the errors? Thx, in advance.- NOTICE: IMQ device is to asociate with ETH1 my external iface. SCRIPT que funciona:

Hi there! Some questions I couldn''t find an answer for: IPtables: - Is it possible to filter those ACK-packets (to eleminate problems with ADSL-connections) with IPtables? It wasn''t possible with IPchains, so u32 had to be used. Now there is this nice little --tcp-flags option. But I just don''t know if this is all I need. The u32 was checking for packetsize too. So if

How to do ensure a class not lended and not borrowed each other. I do cburst burst 0b ,but ctokens tokens go to negative! --------------------------------- Do You Yahoo!? "更多惊喜，同样精彩，NetVista A30 热卖" --0-611462377-1048485942=:33792 Content-Type: text/html; charset=gb2312 Content-Transfer-Encoding: 8bit <P>How to do ensure a class not lended and not borrowed each