Hi All,
I have set up a test script to limit incoming connections to my Network Server like this. Running SuSE Linux Professional 8.2. The snippet from my script is:
SNIP
# Adding some filters
tc filter add dev eth0 protocol ip parent 1:2 prio 1 u32 \ match ip src 192.168.1.1/24 classid 1:2 tc filter add dev eth0 protocol ip parent 1:3 prio 1 u32 \ match ip src 192.168.1.2/24 classid 1:3 tc filter add dev eth0 protocol ip parent 1:4 prio 1 u32 \ match ip src 192.168.1.3/24 classid 1:4 tc filter add dev eth0 protocol ip parent 1:5 prio 1 u32 \ match ip src 192.168.1.4/24 classid 1:5
SNIP
Notice the "Sent 0 bytes" for both teh SFQ qdiscs and the HTB classes. I am stuck over here. Please suggest what might be wrong and whether my approach is right.
I don't know if this is *all* your problems, but there is a very obvious one here - all four of your ip matches are going to match exactly the SAME thing. (And therefore only one is ever going to match)
Why did you put the /24 on the end of the ip address ? That means that you're providing it a netmask, so 192.168.1.1/24 is refering to the entire class C subnet 192.168.1.x.
192.168.1.2/24 also refers to the same class C subnet. If the subnet is a /24 the last octet of the ip address is ignored. If you're really trying to match only on single ip addresses, take off the /24
Regards, Simon
_______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/