From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Furniss Date: Mon, 18 Apr 2005 13:01:28 +0000 Subject: Re: [LARTC] Activate ingress policies on suse enterprise server 9 Message-Id: <4263AFA8.6060805@dsl.pipex.com> List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Grames Gernot wrote: > Hi, > > what is needed to activate ingress policies for enterprise server 9! > tc qdisc add dev eth0 ingress > tc filter add dev eth0 parent ffff: protocol ip u32 match ip dport 8099 > 0xffff police rate 1kbit burst 1kbit mtu 1 drop flowid :1 I get a memory allocation error if I try to add that. Playing around it seems policer doesn't like small burst and mtu together. Burst is a value and will act like MTU so the rule below should work and do what you want - drop everything with dport 8099. tc filter add dev eth0 parent ffff: protocol ip u32 match ip dport 8099 0xffff police rate 1kbit burst 1 drop flowid :1 Andy. _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc