On 11/12/10 11:19 AM, Hunter Fuller wrote: > I'm trying to use the traffic control features of Shorewall. I share > my network with some guys, and I have a tcclasses file like this: > > #Hunter Fuller > eth0 100 1500kbit full 50 > tos-maximize-throughput > #(other guy's name) > eth0 110 1500kbit full 50 > tos-minimize-delay > > etc., based on their personal preferences. > Then for users I cannot identify (wireless guests, basically): > > #unknown DHCP clients > eth0 50 500kbit 500kbit 100 > default,tos-minimize-cost > > This is all fine and good, but right now I have the "unknown dhcp > clients" section commented out, because when I uncomment it, everyone > gets lumped into that class!! So even I, the mighty network admin, get > capped to 500kbit... > > My tcrules is like: > > 50 192.168.1.50-192.168.1.99 eth1 all > 50 eth1 192.168.1.50-192.168.1.99 all > 100 192.168.1.100-192.168.1.109 eth1 all > 100 eth1 192.168.1.100-192.168.1.109 all > 110 192.168.1.110-192.168.1.119 eth1 all > 110 eth1 192.168.1.110-192.168.1.119 all > > etc. > > Am I missing something obvious here?
Sorry to be so slow to answer this. I apparently saved the dump then didn't look at it. What traffic exactly are you trying to shape here. No packets are matching any of your rules, possibly because you are trying to shape web downloads? If so, you have overlooked the fact that you are running squid as a transparent proxy so there is no web download traffic going from eth1 to your local net. So when you enable the default class, all traffic naturally falls into it. Also, half of your rules are going the wrong way to shape traffic leaving on eth0. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today http://p.sf.net/sfu/msIE9-sfdev2dev
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
