In the docs they always talk about only being able to control the outbound traffic, but shouldn't this also control inbound? (ftp obviously) Dan tc qdisc del dev eth0 root handle 1:0 tc qdisc add dev eth0 root handle 1:0 htb default 99 tc class add dev eth0 parent 1:0 classid 1:1 htb rate 768kbps ceil 768kbps burst 2k tc class add dev eth0 parent 1:1 classid 1:10 htb rate 50kbps ceil 50kbps burst 2k tc filter add dev eth0 protocol ip parent 1:0 prio 1 u32 match ip dport 21 0xffff flowid 1:10 tc filter add dev eth0 protocol ip parent 1:0 prio 1 u32 match ip sport 21 0xffff flowid 1:10