Hi, >I have to admit that I don't mark per user. I have lots of users, but I >instead mark the type of traffic and shape on that. That's the reason for good performance in your case. Best regards, Marek Kierdelewicz -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html