Hi Bogdan! Thanks. One more question: If I match packets for shaping (instead of tc filters), which chain should I match packets on? Usually I use FORWARD in the mangle table, but if I look at the following diagram: http://www.sparkle-cc.co.uk/firewall/firewall.html it seems that packets won't go through FORWARD anymore (if it goes through the bridge) so I guess I should match packets on OUTPUT in the mangle table - is this assumption correct? > The shaping is done on eth0 and eth1. There is also a patch that allows > you to match packets that are passing the bridge with iptables. Br0 is > used only for trafic that is for the bridge. Eg. a machine has a route > through the ip of br0. > > Bogdan Coman > > On Tue, 2003-03-04 at 10:58, Abraham van der Merwe wrote: > > Hi! > > > > Usually if you have a machine and traffic passes through it: > > > > +-----+ > > eth0| QoS | > > -------------| box |------------- > > | |eth1 > > +-----+ > > > > You can shape outgoing traffic on eth0 and eth1 effectively shaping both > > incoming/outgoing traffic. > > > > With bridging and above setup you only have a single device br0 - my > > question is whether you can shape both incoming/outgoing traffic on this > > device (i would presume it is not possible) or do you need to redirect > > traffic passing through br0 to imq0 and do shaping on outgoing traffic on > > both br0 and imq0? > > > _______________________________________________ > LARTC mailing list / LARTC@xxxxxxxxxxxxxxx > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ -- Regards Abraham I'm not sure whether that's actually useful... -- Larry Wall in <199710011704.KAA21395@xxxxxxxx> ___________________________________________________ Abraham vd Merwe [ZR1BBQ] - Frogfoot Networks P.O. Box 3472, Matieland, Stellenbosch, 7602 Cell: +27 82 565 4451 Http: http://www.frogfoot.net/ Email: abz@xxxxxxxxxxxx
Attachment:
pgp00104.pgp
Description: PGP signature
