[LARTC] Shaping only FTP traffic

[LARTC] Shaping only FTP traffic

[Shanker Balan]

Hello:

I am a bit unclear on shaping FTP traffic only. How do i do it?

This is what i currently have:

# classid 1:100 is a 200Kbit limiter
# filter for matching "ftp-data" (0x14) and "ftp" (0x15) ports
$TC filter add dev eth1 parent 1:0 protocol ip prio 9 u32 match ip \
sport 0x14 0xffff flowid 1:100
$TC filter add dev eth1 parent 1:0 protocol ip prio 8 u32 match ip \
sport 0x15 0xffff flowid 1:100

This does not seem to work. Can anyone provide me with a filter for
catching active and passive FTP connects?

Thank you for your time.

-- 
Emperor Palpatine:
	Everything that has transpired has done so according
	to my design.

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] Shaping only FTP traffic

[Ivan Lopez]

On Sep/25/2001, Shanker Balan wrote:

> Hello:

hi!

> I am a bit unclear on shaping FTP traffic only. How do i do it?

you just filter by ftp-data port (20) and by passive ports range (most ftp daemons gives you the chance to define a determinate range of ports to use in passive mode)

i discourage you from shaping ftp control traffic (21), because of the annoying delay you introduce in the interactiveness of the ftp session

> This is what i currently have:
>
> # classid 1:100 is a 200Kbit limiter
> # filter for matching "ftp-data" (0x14) and "ftp" (0x15) ports
> $TC filter add dev eth1 parent 1:0 protocol ip prio 9 u32 match ip \
> sport 0x14 0xffff flowid 1:100
> $TC filter add dev eth1 parent 1:0 protocol ip prio 8 u32 match ip \
> sport 0x15 0xffff flowid 1:100
>
> This does not seem to work. Can anyone provide me with a filter for
> catching active and passive FTP connects?

this is how i do it using iptables marking and fw tc filter

#for matching ftp-data
iptables -A OUTPUT -o $IF_EXT -p tcp --sport 20 -j MARK 1
#for matching passive ports range that i configured in my ftp daemon
iptables -A OUTPUT -o $IF_EXT -p tcp --sport 5000:5100 -j MARK 1

#and now the tc filters using fw
tc filter add dev $IF_EXT parent 1:0 protocol ip prio 1 handle 1 fw classid 1:100

> Thank you for your time.

ivan

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/