[LARTC] I need some help with u32 filter

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

This is my ADSL  connection :

ADSL 512k/256k
            |  eth0
--------------------
| Linux box aka fw | -
--------------------
            | eth1
the firewall has smtp and pop3 servers running (I have no spare PC for email
server, byt just for home use it is OK)

Could somebody check my script please, I'm bit  confused of ports 25 and 110
on eth0 and imq0.

tc qdisc del dev imq0 root
tc qdisc add dev imq0 root handle 1 htb default 10 r2q 100

tc qdisc del dev eth0 root
tc qdisc add dev eth0 root handle 1 htb default 10 r2q 100

tc class add dev imq0 parent 1: classid 1:2 htb rate 500kbit burst 15k

tc class add dev imq0 parent 1:2 classid 1:10 htb rate 468kbit ceil 500Kbit
burst 30k prio 0
tc qdisc add dev imq0 parent 1:10 handle 10 sfq perturb 10

tc class add dev imq0 parent 1:2 classid 1:20 htb rate 32Kbit ceil 400Kbit
burst 15k prio 1
tc qdisc add dev imq0 parent 1:20 handle 20 sfq perturb 10

##############
tc filter add dev imq0 parent 1:0 protocol ip prio 100 u32 match ip sport 25
0xffff classid 1:20
Is it enough to have only sport 25 on download link or I need the dport as
well?
##############

tc class add dev eth0 parent 1: classid 1:2 htb rate 250kbit burst 15k

tc class add dev eth0 parent 1:2 classid 1:10 htb rate 218kbit ceil 250Kbit
burst 30k prio 0
tc qdisc add dev eth0 parent 1:10 handle 10 sfq perturb 10

tc class add dev eth0 parent 1:2 classid 1:20 htb rate 32Kbit ceil 250Kbit
burst 15k prio 1
tc qdisc add dev eth0 parent 1:20 handle 20 sfq perturb 10

##############
tc filter add dev eth0 parent 1:0 protocol ip prio 100 u32 match ip sport 25
0xffff classid 1:20
tc filter add dev eth0 parent 1:0 protocol ip prio 100 u32 match ip sport
110 0xffff classid 1:20
The same question on eth0 (upload link)
Is it enough to have only sport 25 and 110 on upload link or I need the
dport as well?
##############

Thank you very much in advance

Remus



[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux