On 09/17/2014 08:47 AM, Teresa e Junior wrote: > Hello to all! I'm a Debian desktop user, and I want to limit all > outgoing traffic from my laptop to a certain value, but after setting > everything up, I can't get it to work. I don't really need a firewall, > because my modem has a simple one, so the idea here is only > limiting the downlink speed system-wide. What I've done so far: > > 1. Install the Debian packages, and run "sudo vuurmuur_conf". > 2. Create an interface called "Wireless", with my IP address in the LAN, > which is "192.168.0.5", and device "wlan0". > 3. Press F6, enable shaping "[X]", set bandwidth to "3 mbit". > 4. Create a zone called "Zone". > 5. Create a network called "Network", set network and netmask to "0.0.0.0". > 6. Press F6, select the interface "Wireless". > 7. Create a rule "Accept", log "[ ]", service "any", from "firewall", to > "any". > 8. Press F6, set both incoming guaranteed and maximum rates to "30 > kbps", and both outgoing guaranteed and maximum rates to "10 kbps", set > priority to "3". > 9. Vuurmuur Config > General > Tc location "/sbin/tc". > 10. Remove ip_queue from /etc/init.d/vuurmuur, because the module > doesn't exist. > 11. Enable the service in /etc/default/vuurmuur. > 12. Run "sudo service vuurmuur start". > > Well, after all this, "Status" and "Connections" show information about > my connection, and "Traffic Volume" doesn't but, more importantly, I did > some downloads at 3mbit, and nothing changed (was not limited to > 30kbps). I have not much experience in networking, so the steps I > followed were just as vuurmuur_conf would tell me something was missing. > Network and Netmask I set to "0.0.0.0" because I googled and came up > with this, but I don't really know what should go there!
The problem probably is that you're running Vuurmuur on your desktop. For the shaping to work properly, a gateway setup is required. This is because the shaping only really works for traffic leaving the gateway. In case of running Vuurmuur on a single host, this limits you to shaping just what you send/upload. This is by design, as shaping incoming traffic on a host is quite difficult. Cheers, Victor ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk _______________________________________________ Vuurmuur-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/vuurmuur-users
