On your upload (eth0) interface, you can't use private IPs, because they've already been natted to real ones (see http://www.docum.org/stef.coene/qos/kptd/ )What about this? : tc filter add dev eth1 parent 1:0 protocol ip prio 100 u32 match ip dst 192.168.0.50 classid 1:56 Is this correct for shaping upload?
If you want to shape outbound traffic based on private-lan IP, you need to mark the packets with iptables, then filter based on mark.
(There are lots of examples of this in the doco and mail archives).
Your download rules seem correct enough.
regards,
----- Original Message ----- From: "andybr" <andybr@xxxxxxxxxx>
To: <gaston@xxxxxxxxxxxx>
Cc: <lartc@xxxxxxxxxxxxxxx>
Sent: Thursday, January 29, 2004 10:05 AM
Subject: Re: Whats wrong with my script?
Hello,
According with rules you are controlling only download (src ip) you should add a (dst rule) also. Make a try.
[]'s Anderson
I`m trying to shape both upload (eth0) and download
(eth1). I made this
script to acomplishthis but the filters are not working
even though the
classes and qdiscs are created. What am I doing wrong?
#!/bin/bash
tc qdisc del dev eth0 root tc qdisc add dev eth0 root handle 1 htb default 10 r2q
5
tc qdisc del dev eth1 root tc qdisc add dev eth1 root handle 1 htb default 10 r2q
5
tc class add dev eth0 parent 1: classid 1:2 htb rate 5M
bit burst 15k
tc class add dev eth0 parent 1:2 classid 1:59 htb rate
64Kbit ceil 64Kbit
tc qdisc add dev eth0 parent 1:59 handle 59 sfq perturb
10
tc filter add dev eth0 parent 1:0 protocol ip prio 100
u32 match ip src
192.168.0.50 classid 1:59
tc class add dev eth1 parent 1: classid 1:2 htb rate 5M
bit burst 15k
tc class add dev eth1 parent 1:2 classid 1:56 htb rate
64Kbit ceil 64Kbit
tc qdisc add dev eth1 parent 1:56 handle 56 sfq perturb
10
tc filter add dev eth1 parent 1:0 protocol ip prio 100
u32 match ip dst
192.168.0.50 classid 1:56
_______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: ht
tp://lartc.org/
__________________________________________________________________________ Acabe com aquelas janelinhas que pulam na sua tela. AntiPop-up UOL - É grátis! http://antipopup.uol.com.br/
_______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
_______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Damion de Soto - Software Engineer email: damion@xxxxxxxxxxxx SnapGear - A CyberGuard Company --- ph: +61 7 3435 2809 | Custom Embedded Solutions fax: +61 7 3891 3630 | and Security Appliances web: http://www.snapgear.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ --- Free Embedded Linux Distro at http://www.snapgear.org ---
_______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
