outbound shaping

[nix4me <nix4me@xxxxxxxxxx>]

24.xxx.xxx.xxx
      |router|
192.168.1.1
      |switch|
192.168.1.100 & 192.168.1.101

I am running proftpd on (192.168.1.101) with the port set to 65437 and 
with passive ports set to 50000-51000.  Proftpd allows you to specify a 
range of ports to use on passive transfers.  I need to be able to limit 
my outbound ftp traffic to 40 Kbytes per second.
The only way I can see to do this is limit by marking packets with 
iptables.  I am marking traffic on 65436 which is the active ftp data 
port (65437-1) and 50000-60000.  Outbound shaping is working 
fine....however....inbound ftp traffic is also being shaped to 40K.  I 
have no idea why.

Seems to me the below rules should mark outbound packets and shape only 
outbound packets.  I dont understand why inbound packets are getting shaped.

Here is the script:
#!/bin/bash
#shaping passive and active outbound ftp traffic on an internal computer 
without affecting inbound and lan speed

# mark the outbound passive ftp packets on ports 50000-51000
iptables -t mangle -D OUTPUT -o eth0 -j MYSHAPER-OUT 2> /dev/null > 
/dev/null
iptables -t mangle -F MYSHAPER-OUT 2> /dev/null > /dev/null
iptables -t mangle -X MYSHAPER-OUT 2> /dev/null > /dev/null

iptables -t mangle -N MYSHAPER-OUT
iptables -t mangle -I OUTPUT -o eth0 -j MYSHAPER-OUT

iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 65436 -j MARK 
--set-mark 20
iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 50000:51000 -j MARK 
--set-mark 20
iptables -t mangle -A MYSHAPER-OUT -m mark --mark 0 -j MARK --set-mark 26
# clear it
tc qdisc del dev eth0 root

#add the root qdisk
tc qdisc add dev eth0 root handle 1: htb default 26

#add main rate limit class
tc class add dev eth0 parent 1: classid 1:1 htb rate 100mbit

#add leaf classes
tc class add dev eth0 parent 1:1 classid 1:20 htb rate 40kbps
tc class add dev eth0 parent 1:1 classid 1:26 htb rate 100mbit

#filter traffic into classes
tc filter add dev eth0 parent 1:0  prio 0 protocol ip handle 20 fw 
flowid 1:20
tc filter add dev eth0 parent 1:0  prio 0 protocol ip handle 26 fw 
flowid 1:26

_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/