On Tuesday 19 August 2003 21:13, Vlad Mihai wrote:
> I have a tc script which splits the bandwidth in 8 leaf classes based on
> IP filtering.
> The script looks like this:
>
> tc filter add dev $LAN_IFACE protocol ip parent 1:0 prio 1 u32 match ip
> dst 192.168.0.121 flowid 1:11
>
>
> The separation works excellent for downloads, but for uploads, it is
> ignored...
> Can you tell me how to deal with it?
Yes. For uploads, the packets are natted. So the src address is rewritten.
You can get around this if you mark the packets with iptables when they enter
the box (so you have the real src address) and use that mark with the fw
filter.
Stef
--
stef.coene@xxxxxxxxx
"Using Linux as bandwidth manager"
http://www.docum.org/
#lartc @ irc.oftc.net
