> 1.im using cbq - is there a simpler way? HTB or TBF seem to be far more straight forward although I've no practicle experience of them - http://lartc.org is our friend on this one. > 2.for matching im using: u32 match ip dst <corporate lan>. but tc > doesnt seem to allow NOT. ie: match ip dst ! <corporate lan> > how can i specify "everything else", without resorting to typing in ten > lines of network addresses to account for the internet? You could use iptables to 'mark' the packets, then match on those marks for your priorities :) HTH Jamie... -- ** This message was transmitted on 100% recycled electrons ** - : send the line "unsubscribe linux-admin" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html