All of lore.kernel.org
 help / color / mirror / Atom feed
From: Mike Wright <xktnniuymlla@mailinator.com>
To: lartc@vger.kernel.org
Subject: [LARTC] newbie needs policing help
Date: Fri, 20 Jul 2007 20:45:14 +0000	[thread overview]
Message-ID: <46A11EDA.90507@mailinator.com> (raw)

Hi listizens,

Complete tc newbie here.  I'm in a pinch because of a mail assault on a 
server.  I've firewalled away many of the most egregious offenders but 
non-smtp services are still being DOS'ed because of all the mail traffic.

Here is what I've tried.  (I did say newbie ;)

-----------------
#!/bin/sh
#
# policing parent
tc qdisc add dev eth0 handle ffff: ingress
#
# filter should slow tcp smtpd traffic to 64k max
tc filter add dev eth0 parent ffff: protocol ip prio 50 \
     u32 match ip dport 0x25 0xFFFF match ip protocol 0x06 0xff \
     police rate 55kbit burst 9k drop flowid :1
-----------------

...but I haven't the slightest idea how to check up on it.  e.g. with 
iproute2 I could say "ip route list" to see what was in there, but how 
can I check tc rules?  "tc qdisk show" gives some cryptic output but "tc 
filter show dev eth0" returns nothing.

(I'm not even sure if the above rules make any sense :(  )

Any helpers out there?

TIA,
Mike Wright :m)
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

                 reply	other threads:[~2007-07-20 20:45 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=46A11EDA.90507@mailinator.com \
    --to=xktnniuymlla@mailinator.com \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.