Matching outgoing ssh traffic if ssh connection initiated from outside

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



In regards to my earlier post, I believe that my problem is that the filter is not matching ssh traffic properly.  Here are the rules that I posted earlier, with the filter being the last one:

tc qdisc add dev eth0 root handle 1: htb default 3
tc class add dev eth0 parent 1: classid 1:1 htb rate 102400kbps ceil 102400kbps
tc class add dev eth0 parent 1:1 classid 1:2 htb rate 102400kbps ceil 102400kbps
tc class add dev eth0 parent 1:1 classid 1:3 htb rate 3kbps ceil 3kbps
tc filter add dev eth0 protocol ip parent 1:0 prio 1 u32 match ip dport 22 0xffff flowid 1:2

The rules are on Machine A and Machine A is the one running the P2P applications (the traffic control + the P2P downloads are on the same machine).  The machine only has a single NIC.

After thinking about it, I believe that this will work fine and match ssh but only if the ssh traffic originates from Machine A (Machine A is the one connecting to another machine) but doesn't match if someone is ssh'ing to Machine A (which is what I'm trying to do).  Any ideas?  Thanks for your help.

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux