Re: [LARTC] Port limiting on forward

2004-01-04 Thread Roy
So what is the problem?
create root class

/qos/bin/tc qdisc del dev eth0 root
/qos/bin/tc qdisc add dev eth0 root handle 2

and add these
# mark 23
/qos/bin/tc class add dev eth0 parent 2: classid 2:41 htb rate 8Kbit ceil
8Kbit
/qos/bin/tc qdisc add dev eth0 parent 2:41 sfq
/qos/bin/tc filter add dev eth0 parent 2: protocol ip pref 4 handle 23 fw
classid 2:41

# mark 24
/qos/bin/tc class add dev eth0 parent 2: classid 2:42 htb rate 1000Kbit ceil
1000Kbit
/qos/bin/tc qdisc add dev eth0 parent 2:42 sfq
/qos/bin/tc filter add dev eth0 parent 2: protocol ip pref 4 handle 24 fw
classid 2:42

-
I have 40 Users on P2 200 MMX 32 RAM .
So i know how to match packets .
iptables -t mangle -N MYSHAPER-OUT
iptables -t mangle -I POSTROUTING -o $DEV -j MYSHAPER-OUT



iptables -t mangle -A MYSHAPER-OUT -s! 192.168.0.5 -p tcp --dport 0:1024 -j
MARK --set-mark 23

iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 6660:65000 -j
MARK --set-mark 24

How do i shape mark 23 at 1 KB/s and mark 24 at 1 MB/s ?



___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


Re: [LARTC] Port limiting on forward

2004-01-04 Thread MCraciun






I have 40 Users on P2 200 MMX 32 RAM .
So i know how to match packets .
iptables -t mangle -N MYSHAPER-OUT
iptables -t mangle -I POSTROUTING -o $DEV -j MYSHAPER-OUT
 
 
 
iptables -t mangle -A MYSHAPER-OUT -s! 192.168.0.5 -p tcp --dport 0:1024 -j MARK --set-mark 23
 

iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 6660:65000 -j MARK --set-mark 24
 
How do i shape mark 23 at 1 KB/s and mark 24 at 1 MB/s ?
 
 
 
 









Re: [LARTC] Port limiting on forward

2004-01-04 Thread Roy


I heard that matching ports with mangle and shape with CBQ or HTB will cost
me some resources so i want to limit that way :

1. On forward I want to limit a port range like 0 to 79 at 8kbps .And after
that i want to be able to add lines with other port range , also at 8kbps,
but only on forward .Today i had just started to use BBQ and HTB



are you so low on resources? or yo want to manage 1 users?

the simple way to do everything that is to mark packets with iptables there
is no other way to match port range.
also you can know if pcket is forwarded of not by marking it with iptables
or by source ip.

And how do you use cbq and htb at once?

___
LARTC mailing list / [EMAIL PROTECTED]
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


[LARTC] Port limiting on forward

2004-01-04 Thread MCraciun






I heard that matching ports with mangle and shape with CBQ or HTB will cost me some resources so i want to limit that way :
 
1. On forward I want to limit a port range like 0 to 79 at 8kbps .And after that i want to be able to add lines with other port range , also at 8kbps, but only on forward .Today i had just started to use BBQ and HTB