From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Daniel Cabezas" Date: Sun, 15 Aug 2004 18:38:39 +0000 Subject: Re: [LARTC] Little question about imq device Message-Id: <20040815183608.M49742@seriousworks.net> List-Id: References: <714155614.20040815190358@op.pl> In-Reply-To: <714155614.20040815190358@op.pl> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org On Sun, 15 Aug 2004 19:03:58 +0200, Marcin Sura wrote > Witam > > I've found many examples where packets are redirected to IMQ device > in PREROUTING chain for ingress traffic shaping purposes. > > But is there any sense in redirecting packets to IMQ in FORWARD > chain also for ingress traffic shaping purposes? Yes, I think, imagine something like this. Imagine you are the gateway of a whole class C , with ip 192.168.0.1 then : tc qdisc add dev imq0 handle 1: root htb default 1 tc class add dev imq0 parent 1: classid 1:1 htb rate 64kbit tc qdisc add dev imq0 parent 1:1 handle 2 sfq iptables -t mangle -A FORWARD -i eth0 -d 192.168.0.X -j IMQ would prevent traffic coming from an outside network attached to the gw going to the 192.168.0.x host. Daniel . ------- daniel_at_seriousworks.net /Cabezas SeriousWorks Solutions, SCP ______/ Barcelona, Spain www: http://www.seriousworks.net _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/