I am in the process of migrating an ancient Centos 5 version of
Shorewall to Rocky Linux 9.8. In my tcdevices file I had:
###############################################################################
#NUMBER: IN-BANDWITH OUT-BANDWIDTH OPTIONS REDIRECTED
#INTERFACE INTERFACES
eth0 0mbit 20mbit
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
The 0mbit IN-BANDWITH meant no limit on incoming traffic in that version
of shorewall [4.5.21.8 -- yes quite old]. I compiled my config and ran a
shorewall compile of my configuration. Looking at the generated nft, it
appears that the 0mbit is interpreted as setting the inbound limit to
0mbps. After reading the docs and source, I see the correct tcdevices
line should be:
eth0 - 20mbit
when you want unlimited IN-BANDWITH
Glad I caught this before turning on shorewall!
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
