Hey I've been playing with bandwidth sharing and the best solution seems to be a mix of iptables and CBQ but I seem to be in trouble already. I've choosen to mark al traffic from my LAN going to the internet (upload) as according to the following command which seems to work: iptables -A PREROUTING -t mangle -i eth0 -p tcp -d ! 192.168.0.0/24 -j MARK --set-mark 1 But how do I mark the data that's being transferred through the masquaraded connection (download) established by the computers on the LAN?