From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stef Coene Date: Fri, 14 Mar 2003 21:39:37 +0000 Subject: Re: [LARTC] IMQ/iptables question Message-Id: List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org On Friday 14 March 2003 15:13, David Watson wrote: > Hello, > > I am using IMQ on my firewall to manage downloads by two networks within > the firewall. I mark traffic in iptables, and jump to IMQ from postrouting. > This allows me to manage the traffic coming from the internet even though > it is leaving on 2 interfaces, however I think I've hit a limitation of > IMQ. If the firewall machine downloads from the internet link then > postrouting rules are not hit in iptables. I did try putting a rule in > input jumping to IMQ, but I wasn't particularly surprised when I didn't see > the traffic on imq0. So you tried putting packets from the input table in the imq device, but that didn't worked? Strange. > Is there a way to manage the input traffic to the firewall from the > internet alongside the two internal networks? I guess policing might be the > only option? If you are able to put the traffic from the input iptable in the imq device, you can. Stef -- stef.coene@docum.org "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/