Package: shorewall-shell Version: 4.4.7.5-1 Severity: normal I have configured shorewall for bandwidth limiting, and this worked fine before. Now it no longer works. The contents of my /etc/shorewall/tcdevices is
eth1 800kbit 400kbit and eth1 is the interface of my wireless network card, which I use exclusively. 'iptables --list' shows me that shorewall has been enabled, and the log file /var/log/shorewall-init.log shows: .. .. .. Mar 14 01:11:46 Adding rules for DHCP Mar 14 01:11:46 Compiling TCP Flags filtering... Mar 14 01:11:46 Compiling Kernel Route Filtering... Mar 14 01:11:46 Compiling Martian Logging... Mar 14 01:11:46 Compiling /etc/shorewall/tcdevices... Mar 14 1:11:46 Tcdevice "eth1 800kbit 400kbit" Compiled. Mar 14 01:11:46 Compiling MAC Filtration -- Phase 1... Mar 14 01:11:46 Compiling /etc/shorewall/rules... Mar 14 1:11:46 Rule "ACCEPT net fw tcp 8010" Compiled Mar 14 1:11:46 Rule "ACCEPT net fw tcp 22" Compiled .. .. .. .. So we can see that the tcdevices file is being read during the initialization. But how come the limiting is no longer effective? Bandwidth tests now show a download speed of more than 1600kbit/s. I know it worked perfectly a couple of months ago. >From reading /usr/share/doc/shorewall/changelog.gz, I see several items related to bandwidth limiting near the top, e.g: ************************************************** Changes in Shorewall 4.4.7.5 1) Don't create a logging chain for rules with '-j RETURN'. 2) Avoid duplicate SFQ class numbers. 3) Fix low per-IP rate limits. Changes in Shorewall 4.4.7.4 1) Add $remote_fs to Required-start and Required-stop for Debian. Changes in Shorewall 4.4.7.3 1) Detect FLOW_FILTER when LOAD_HELPERS_ONLY=Yes Changes in Shorewall 4.4.7.2 1) Fix detection of "Old hashlimit match". 2) Detect FLOW_FILTER when LOAD_HELPERS_ONLY=No Changes in Shorewall 4.4.7.1 1) Don't apply rate limiting twice in NAT rules. ***************************************************** Could a bug have been introduced by these changes? Or is my configuration invalid because of a configuration file format change? Best regards Torquil -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (700, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.32-3-686 (SMP w/1 CPU core) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages shorewall-shell depends on: ii shorewall 4.4.7.5-1 Shoreline Firewall, netfilter conf shorewall-shell recommends no packages. shorewall-shell suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
