Re: [LARTC] Wondershaper in internal network

[gypsy <gypsy@iswest.com>]

nix4me wrote:
> 
> gypsy wrote:
> >You might be able to set up a modified Wonder such that the default /
> >bulk does 100Mbit (assuming your internal NW is 100) by setting RATE > >CEIL = 100Mb and then shape everything where the IP matches your DSL IP
> >so that internet stuff never gets into the bulk queue.  Sort of
> >"reverse" logic, but that is the way I dealt with an FTP server.  In the
> >absence of a firewall mark in FTP packets, there is no good way to
> >identify them, so instead handle the stuff you CAN identify and let the
> >rest go into bulk.
> >
> Well, there is a better way.  I was able to mark ftp outgoing traffic
> using iptables.  I shape all outgoing packets on a port range and throw
> the rest in a 100mbit bulk.  Works like a champ.  i have the outbound
> ftp passive ports and the active port marked.  Let me know if you want
> to see my script.
> 
> Mark

One can mark FTP packets using iptables, but
1) it takes a fair amount of horsepower on a dedicated, busy FTP server
2) in my case, even with all the helpers loaded, iptables was not
marking all packets
3) now that (most) of the FTP packets are marked, you must modify Wonder
to filter on the FW mark

IMO, that is not "a better way" than having everything not caught by a
filter into a default queue.

gypsy
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/