Re: [LARTC] I need some help with u32 filter

[Stef Coene <stef.coene@docum.org>]

On Thursday 13 February 2003 14:24, Remus wrote:
> Hello,
>
> This is my ADSL  connection :
>
> ADSL 512k/256k
>
>             |  eth0
>
> --------------------
>
> | Linux box aka fw | -
>
> --------------------
>
>             | eth1
>
> the firewall has smtp and pop3 servers running (I have no spare PC for
> email server, byt just for home use it is OK)
>
> Could somebody check my script please, I'm bit  confused of ports 25 and
> 110 on eth0 and imq0.
>
> tc qdisc del dev imq0 root
> tc qdisc add dev imq0 root handle 1 htb default 10 r2q 100
>
> tc qdisc del dev eth0 root
> tc qdisc add dev eth0 root handle 1 htb default 10 r2q 100
>
> tc class add dev imq0 parent 1: classid 1:2 htb rate 500kbit burst 15k
>
> tc class add dev imq0 parent 1:2 classid 1:10 htb rate 468kbit ceil 500Kbit
> burst 30k prio 0
> tc qdisc add dev imq0 parent 1:10 handle 10 sfq perturb 10
>
> tc class add dev imq0 parent 1:2 classid 1:20 htb rate 32Kbit ceil 400Kbit
> burst 15k prio 1
> tc qdisc add dev imq0 parent 1:20 handle 20 sfq perturb 10
>
> ##############
> tc filter add dev imq0 parent 1:0 protocol ip prio 100 u32 match ip sport
> 25 0xffff classid 1:20
> Is it enough to have only sport 25 on download link or I need the dport as
> well?
You never told us what's redirected to the imq device.  But I suppose it's 
incoming traffic from the internet.  If you want to match mail coming from 
the internet to your smtp server, you need dport 25.  All traffic is sended 
to your smtp and that's server is running on port 25.

> ##############
>
> tc class add dev eth0 parent 1: classid 1:2 htb rate 250kbit burst 15k
>
> tc class add dev eth0 parent 1:2 classid 1:10 htb rate 218kbit ceil 250Kbit
> burst 30k prio 0
> tc qdisc add dev eth0 parent 1:10 handle 10 sfq perturb 10
>
> tc class add dev eth0 parent 1:2 classid 1:20 htb rate 32Kbit ceil 250Kbit
> burst 15k prio 1
> tc qdisc add dev eth0 parent 1:20 handle 20 sfq perturb 10
>
> ##############
> tc filter add dev eth0 parent 1:0 protocol ip prio 100 u32 match ip sport
> 25 0xffff classid 1:20
> tc filter add dev eth0 parent 1:0 protocol ip prio 100 u32 match ip sport
> 110 0xffff classid 1:20
> The same question on eth0 (upload link)
> Is it enough to have only sport 25 and 110 on upload link or I need the
> dport as well?
You connect to port 25 and it's for traffic leaving the server, so you need 
sport 25.

Stef

-- 

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.oftc.net
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/