RE: [LARTC] iptables CLASSIFY vs fwmark?

2006-05-07 Thread William Bohannan
Using fwmark would mean that packets have to pass two filter systems. First iptables, where the got marked and then the tc-filter ruleset where the mark needs to be matched again. And this is something I want to avoid because this means worse performance, so I was wondering if there is a possible

Re: [LARTC] time matching in the mangle stage?? is it possible??

2006-05-07 Thread Andy Furniss
William Bohannan wrote: the classify command which only works in the postrouting. I'd try it, I think it works everywhere now the even if old docs say different. Andy. ___ LARTC mailing list LARTC@mailman.ds9a.nl

Re: [LARTC] How to write a catch all rule?

2006-05-07 Thread Andy Furniss
Andreas Unterkircher wrote: http://mailman.ds9a.nl/pipermail/lartc/2005q3/016774.html tc filter add dev eth0 parent 1:0 protocol all u32 match u32 0 0 flowid 1:1 That will match all. Someone told me once that the difference between it working and not on a large rule set was the explicit

Re: [LARTC] icmp latency question

2006-05-07 Thread Andrew Beverley
Many thanks for the reply. sfq's default queue of 128 may cause you some pain. You could try a pfifo 10 or recompile after modifying sch_sfq.c in your kernel tree. I tried the above (modifying to 10) but didn't notice much difference. Also, using the prio parameter with htb may not do what

Re: [LARTC] HTB How To ??

2006-05-07 Thread Daniel Harold L.
On Monday April 17 2006 18:56, Cahyo Purnomo wrote: Dear All, I wanna to implement of bandwith shapingin my office using HTB, any body suggest about the case ? Below the acl ip range i want to limit : 1. staf (10.0.0.1 - 3) -- limit to 10kbyte/s 2. lab (10.0.0.4 - 6) -- limit to 5kbyte/s