From mboxrd@z Thu Jan 1 00:00:00 1970 From: bert hubert ahu@ds9a.nl Date: Wed, 18 Oct 2000 12:57:12 +0000 Subject: [LARTC] Bandwidth limiting problem Message-Id: List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org 
On Wed, Oct 18, 2000 at 01:39:56PM +0200, Fredrik Rambris wrote:

> > You can also use the ingress policer but that's a bit after the fact, as the
> > HOWTO says 'like throwing away half the letters you receive, in the hope
> > that people will stop sending you them'.
> 
> I could live with that (if it works). In the shaping example in the
> howto. How would ingress be implemented? What's the syntax?

See the dDoS example in the HOWTO, it installs an ingress policer on SYN
packets. I tried it at home and had some problems, tc gave an error, but
perhaps I lack features in the kernel.

Regards,

bert hubert


-- 
PowerDNS                     Versatile DNS Services  
Trilab                       The Technology People   
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet