At 00:24 25/02/2004, Animesh Bansriyar wrote:

Hi All,

I have set up a test script to limit incoming connections to my Network
Server like this. Running SuSE Linux Professional 8.2. The snippet from
my script is:

SNIP


# Adding some filters

tc filter add dev eth0 protocol ip parent 1:2 prio 1 u32 \
    match ip src 192.168.1.1/24 classid 1:2
tc filter add dev eth0 protocol ip parent 1:3 prio 1 u32 \
    match ip src 192.168.1.2/24 classid 1:3
tc filter add dev eth0 protocol ip parent 1:4 prio 1 u32 \
    match ip src 192.168.1.3/24 classid 1:4
tc filter add dev eth0 protocol ip parent 1:5 prio 1 u32 \
    match ip src 192.168.1.4/24 classid 1:5

SNIP


Notice the "Sent 0 bytes" for both teh SFQ qdiscs and the HTB classes. I
am stuck over here. Please suggest what might be wrong and whether my
approach is right.

I don't know if this is *all* your problems, but there is a very obvious one here - all four of your ip matches are going to match exactly the SAME thing. (And therefore only one is ever going to match)


Why did you put the /24 on the end of the ip address ? That means that you're providing it a netmask, so 192.168.1.1/24 is refering to the entire class C subnet 192.168.1.x.

192.168.1.2/24 also refers to the same class C subnet. If the subnet is a /24 the last octet of the ip address is ignored. If you're really trying to match only on single ip addresses, take off the /24

Regards,
Simon

_______________________________________________
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Reply via email to