[LARTC] Masquerade and tc filter

[LARTC] Masquerade and tc filter

[Tadas]

Hello,

I am building a gateway/shaper. As always, there is a locl network
192.168.3.0/24 and connection to internet. Gateway masquerades these
connections. I need to limit upload and download speed for certain IPs. With
download traffic everything is ok: i have put filters on the local netwrok
interface. But I can't set up filters by source address on outgoing
traffic - the interface which makes masquerading.  I have noticed that all
traffic have the same router source address set.

So, what's the solution? Maybe it is imposible? But I have looked through
wondershaper and I saw that there are source  address filters.

Please give me a hint. I am using kernel 2.4.20.

Bye,
Tadas

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Fw: [LARTC] Masquerade and tc filter

[Tadas]

I know what imq is. Everything is O.K. with download traffic. I need to
shape Upload traffic. But the problem is that u32 filter does not match
correct source address for forwarded packets - only gateway's.

Bye,
Tadas

----- Original Message ----- 
From: "peyrak" <peyrak@seznam.cz>
To: "Tadas" <tadas-lartc@silvernet.kis.lt>
Sent: Sunday, April 27, 2003 11:51 AM
Subject: Re: [LARTC] Masquerade and tc filter


> imq
>
> ###########################
> # Jirka Pirko             #
> # jirka@pirko.cz          #
> # xpirko@fi.muni.cz       #
> # cellular: +420608065259 #
> # icq uin: 136218111      #
> ###########################
> ----- Original Message -----
> From: "Tadas" <tadas-lartc@silvernet.kis.lt>
> To: <lartc@mailman.ds9a.nl>
> Sent: Sunday, April 27, 2003 8:43 AM
> Subject: [LARTC] Masquerade and tc filter
>
>
> > Hello,
> >
> > I am building a gateway/shaper. As always, there is a locl network
> > 192.168.3.0/24 and connection to internet. Gateway masquerades these
> > connections. I need to limit upload and download speed for certain IPs.
> With
> > download traffic everything is ok: i have put filters on the local
netwrok
> > interface. But I can't set up filters by source address on outgoing
> > traffic - the interface which makes masquerading.  I have noticed that
all
> > traffic have the same router source address set.
> >
> > So, what's the solution? Maybe it is imposible? But I have looked
through
> > wondershaper and I saw that there are source  address filters.
> >
> > Please give me a hint. I am using kernel 2.4.20.
> >
> > Bye,
> > Tadas
> >
> > _______________________________________________
> > LARTC mailing list / LARTC@mailman.ds9a.nl
> > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
> >
>
>

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Masquerade and tc filter

[Stef Coene]

On Sunday 27 April 2003 08:43, Tadas wrote:
> Hello,
>
> I am building a gateway/shaper. As always, there is a locl network
> 192.168.3.0/24 and connection to internet. Gateway masquerades these
> connections. I need to limit upload and download speed for certain IPs.
> With download traffic everything is ok: i have put filters on the local
> netwrok interface. But I can't set up filters by source address on outgoing
> traffic - the interface which makes masquerading.  I have noticed that all
> traffic have the same router source address set.
>
> So, what's the solution? Maybe it is imposible? But I have looked through
> wondershaper and I saw that there are source  address filters.
>
> Please give me a hint. I am using kernel 2.4.20.
The solution is to mark the packets when they enter your firewall.  Give each 
ip a different mask (so this happens before the src address is rewritten).  
When they leave the firewall, you can use that mark with the fw filter.  That 
mark only exists in your kernel memory, so it's only valid in your firewall.

Stef

-- 

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.oftc.net

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/