[LARTC] This simple ingress script blocks my traffic

[LARTC] This simple ingress script blocks my traffic

[Ludovic Drolez]

Hi !

I have a 56k modem internet connection and I want to control
the BW of ftp downloads. But when I run the following script,
my downloads are simply stopped (and they resume if I clear the rules):

-----------------
#!/bin/sh
DEV=ppp0
DOWNLINK\x14kbit
/sbin/ipchains -A input -i $DEV -p tcp -s 0/0 ftp-data -m 1
tc qdisc del dev $DEV root    2> /dev/null > /dev/null
tc qdisc del dev $DEV ingress 2> /dev/null > /dev/null
tc qdisc add dev $DEV handle ffff: ingress

tc filter add dev $DEV parent ffff: protocol ip prio 50 handle \
1 fw police rate $DOWNLINK burst 3000 mtu 1500 drop flowid :1
------------------

I have a Debian woody with the 2.4.18-k6 kernel. All modules are loaded
(cls_u32, cls_fw, sch_ingress, ...)
I get the same result If I try an "u32" match instead of a  
firewall mark match.
When I tcpdump, it seems that the application does not receive
incoming packets.
When I ask for qdisc stats, it answers me 
"Sent 0 bytes 0 pkts (dropped 0, overlimits 0)"

Any clue ?

TIA,

   Ludovic.







_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/