Stef Coene wrote: >>gio: i have to use iptables? >> >Or 2 u32 filters : first filter matches local traffic, second filter matches >all traffic. The second filter will never be used for the local traffic. > >Stef > tc qdisc del dev eth0 root #eht0 rules tc qdisc add dev eth0 root handle 1: htb default 12 #shape interface eth0 tc class add dev eth0 parent 1: classid 1:1 htb rate 10mbit ceil 10mbit burst 2k #Internet tc class add dev eth0 parent 1:1 classid 1:11 htb rate 500kbit ceil 500kbit burst 2k #Lan tc class add dev eth0 parent 1:1 classid 1:12 htb rate 10mbit ceil 10mbit burst 2k #mark Internet class tc filter add dev eth0 parent 1: protocol ip prio 3 handle 1 fw classid 1:11 #add qdisc discipline Lan tc qdisc add dev eth0 parent 1:12 handle 32: sfq perturb 10 #add qdisc discipline Internet tc qdisc add dev eth0 parent 1:11 handle 41: sfq perturb 10 ################################################################################### #fitler marks by iptables #iptables output iptables -F -t mangle #Mark Internet traffic iptables -A OUTPUT -t mangle -d $myip -j MARK --set-mark 1 with this rule it shapes traffic for marked ip and gives all other 10 mbit but i do not want this, iptables -A OUTPUT -t mangle -d $myip -s ! $routerip -j MARK --set-mark 1 it does not shapes internet traffic, it gaves 10mbit to all. i am downloading from internet without shaping, note i am downloading through the SQUID which is running on router.