On Friday 14 March 2003 15:13, David Watson wrote: > Hello, > > I am using IMQ on my firewall to manage downloads by two networks within > the firewall. I mark traffic in iptables, and jump to IMQ from postrouting. > This allows me to manage the traffic coming from the internet even though > it is leaving on 2 interfaces, however I think I've hit a limitation of > IMQ. If the firewall machine downloads from the internet link then > postrouting rules are not hit in iptables. I did try putting a rule in > input jumping to IMQ, but I wasn't particularly surprised when I didn't see > the traffic on imq0. So you tried putting packets from the input table in the imq device, but that didn't worked? Strange. > Is there a way to manage the input traffic to the firewall from the > internet alongside the two internal networks? I guess policing might be the > only option? If you are able to put the traffic from the input iptable in the imq device, you can. Stef -- stef.coene@xxxxxxxxx "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net