Thanks to everyone, my problem has been solved. Here is my description: for BIG ISP, if you have broadband for every client and use NAT_SRC to let them out, and you want to divide bandwidth among all clients. My solution is iproute2 + netfilter. I've modified netfilter framework's src to hash every client (not like originally,line by line) and also do some accounting based on flow, and add a table(which hacks after NAT_SRC, not like mangle. Mangle hacks before NAT_SRC), then mark the packets with it's classid related with it's intra-network ipaddr, so the dev attached with filter fw with no option will classify directly into the class with that classid, finally control it's bandwidth(I use HTB). Every step is O(1) in complexity. Excellent! Thanks for all. Thanks for all the people here and from netfilter mail-list. Iproute2+ netfilter seems pretty good! I've got good performance! I'm a new here, so very nice to hear from you, you are so kind. -----Original Message----- From: lartc-admin@xxxxxxxxxxxxxxx [mailto:lartc-admin@xxxxxxxxxxxxxxx] On Behalf Of bert hubert Sent: 2001年12月12日 21:51 To: Martin Devera Cc: yangrunhua; lartc@xxxxxxxxxxxxxxx Subject: Re: [LARTC] HTB problem On Wed, Dec 12, 2001 at 12:40:57PM +0100, Martin Devera wrote: > try replace 0x0001000a by 0x00010010. IIRC in 1:10 > the "10" is in hex. True. Even the 1 is hex! Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services Trilab The Technology People Netherlabs BV / Rent-a-Nerd.nl - Nerd Available - 'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/lartc/