From: David Watson <David.Watson@team17.com>
To: lartc@vger.kernel.org
Subject: [LARTC] IMQ/iptables question
Date: Fri, 14 Mar 2003 14:13:34 +0000 [thread overview]
Message-ID: <marc-lartc-104765128309813@msgid-missing> (raw)
Hello,
I am using IMQ on my firewall to manage downloads by two networks within
the firewall. I mark traffic in iptables, and jump to IMQ from postrouting.
This allows me to manage the traffic coming from the internet even though
it is leaving on 2 interfaces, however I think I've hit a limitation of
IMQ. If the firewall machine downloads from the internet link then
postrouting rules are not hit in iptables. I did try putting a rule in
input jumping to IMQ, but I wasn't particularly surprised when I didn't see
the traffic on imq0.
Is there a way to manage the input traffic to the firewall from the
internet alongside the two internal networks? I guess policing might be the
only option?
Thanks
_____________________________________________________________
David Watson, Network Manager, Team17 Software Ltd.
Phone: +44-1924-267776 Fax: +44-1924-267658
_____________________________________________________________
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
next reply other threads:[~2003-03-14 14:13 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-03-14 14:13 David Watson [this message]
2003-03-14 21:39 ` [LARTC] IMQ/iptables question Stef Coene
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-104765128309813@msgid-missing \
--to=david.watson@team17.com \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.