[LARTC] shaping outbound ftp traffic

* [LARTC] shaping outbound ftp traffic
@ 2004-10-08 15:42 nix4me
  2004-10-08 15:46 ` nix4me
                   ` (2 more replies)
  0 siblings, 3 replies; 4+ messages in thread
From: nix4me @ 2004-10-08 15:42 UTC (permalink / raw)
  To: lartc

>In theory yes, but it is shaping inbound transfers to my server.

>YOu're not doing any other sort of Ingress filters are you??

No

>I dont care about destination port.  That line was commented.  BUT, incoming transfers are being shaped for some reason.

>Could this be shaping on the ISP side?? What >happens when the tc rules
>are shut off??

No, everything works fine

>Can you determine what ports are being used for >inbound data transfers?
>What makes you select those ports you defined as >the outbound??

Same ports, 50000-51000 and 65437. 
I choose these ports because they are the ports that I have passive ftp traffic on and 65437 is the active ftp port.

I just dont understand why the inbound traffic is being limited.  The outbound shaping works fine.

Script:
I am using the following script to limit my outbound traffic. This scipt runs on a box behind my firewall. It limits my outbound passive ftp traffic to 39K perfectly....just like i want. However, i just noticed that it is also limiting uploads coming to my server.

Is there something I can change to make it not limit uploads to my server?
#!/bin/bash
#shaping passive ftp traffic

# mark the outbound passive ftp packets on ports 50000-51000
iptables -t mangle -D POSTROUTING -o eth0 -j MYSHAPER-OUT 2> /dev/null > /dev/null
iptables -t mangle -F MYSHAPER-OUT 2> /dev/null > /dev/null
iptables -t mangle -X MYSHAPER-OUT 2> /dev/null > /dev/null

iptables -t mangle -N MYSHAPER-OUT
iptables -t mangle -I POSTROUTING -o eth0 -j MYSHAPER-OUT

iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 65437 -j MARK --set-mark 20
iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 50000:51000 -j MARK --set-mark 20
iptables -t mangle -A MYSHAPER-OUT -m mark --mark 0 -j MARK --set-mark 26
# clear it
tc qdisc del dev eth0 root

#add the root qdisk
tc qdisc add dev eth0 root handle 1: htb default 26

#add main rate limit class
tc class add dev eth0 parent 1: classid 1:1 htb rate 10000mbps

#add leaf classes
tc class add dev eth0 parent 1:1 classid 1:26 htb rate 10000mbps
tc class add dev eth0 parent 1:1 classid 1:20 htb rate 39kbps

#filter traffic into classes
tc filter add dev eth0 parent 1:0 prio 0 protocol ip handle 20 fw flowid 1:20
tc filter add dev eth0 parent 1:0 prio 0 protocol ip handle 26 fw flowid 1:26

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

^ permalink raw reply	[flat|nested] 4+ messages in thread