> Still no packets being filtered into my CBQ, but the packets are clearly > being marked. I found the error. You mark the packets when they enter your box with iptables on device eth0. But you add the qdisc and the classes to the same device. But this qdisc and class can only control OUTgoing traffic and you want to control incoming traffic. If this is a firewall with two NIC's, you can attach the qdisc and class to the second NIC. Incoming NTP traffic get's marked and get's shaped when it leaves the box on the second NIC. If you really want to shape incoming traffic, you will have to use the ingress qdisc or the IMQ device. Stef -- stef.coene@xxxxxxxxx "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.openprojects.net