On 11/2/2008 12:46 PM, Daniel L. Miller wrote:
Since tc acts on an interface basis - can I perhaps setup a bridge with a single interface in it? So address the physical interface eth0 for my LAN, set the bridge for the Internet modem, and then use tc on the bridge but not on the ethernet interface?
Unless you have a good reason, I would strongly suggest that you add a second NIC to the box and put your internet connection on that second NIC.
Technically I /believe/ you can do it with a single NIC, but it is extremely complex to do in such as you have to take in to account both internal (LAN), external (Internet), inbound, and outbound traffic all on the same interface and in the same tree structure. Where as if you have separate NICs you can separate your interfaces and tree structures such that internet reply traffic is processed as traffic going out the internal interface and internet request traffic is processed as traffic going out the external interface. Usually people do not want to rate limit / QoS their internal LAN traffic, requests or replies.
Further, if someone is on the same network segment as your internet connection, (with Static IP or DHCP) it may be possible for them to do some nefarious things (think MAC addresses) to be able to connect directly in to your systems across the internet bypassing your router all together.
Grant. . . . -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
