Mike wrote:
>       I have a box in the lan that sends packets through open vpn.
> openvpn is running on the shorewall boxes on both endpoints.
> The traffic is being classified, but clipping is occuring.
> Does traffic have to be classifed on the openvpn interface as well?

You must define shaping on the openvpn interface if you want to prioritize
the traffic going through that interface. And you probably also want to give
the open VPN traffic itself (usually UDP 1194) a boost on the external
interface.

-Tom


Thank you Tom
Not sure how to go about that yet but I will do some studying.
I have searched for some examples and posts for simular 
configurations. Trouble is most are asterisk, these phone
systems are vodavi phone boxes using h323 with the bit 7 turned on in the
TOS
field for their QOS. Since the VOIP cards are assigned an IP I use the
IP for Qos. Not much out there for example configs. Has anybody else got 
any examples for this?
        On a side note when I did the shorewall dump in the last post
I got this error but the dump seemed to work and did not list connections in
the dump:
[EMAIL PROTECTED] ~]# shorewall dump > dump
cat: /proc/net/ip_conntrack: No such file or directory

Is shorewall looking in the wrong place for ipconntrack?

Mike




-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to