Hi Stef, lo all,

Am hoping someone could have the time to look at my simple script, it 
basically tries to restrict users based on their ip, but I also incorporated 
the hints given by Stef on being able to allow local traffic unrestricted.  
no iptable marking (fw filter) is used, just tc.

I see traffic passing thru all the classes when ever those systems are in 
use.

Ave done some stress test on the local traffic by plugging p2p/web crawlers 
on the LAN of one of the systems, each time i notice that the parent ceil 
limit is being broken.

I have met the one major requirement, sum of child classes rate <= parent 
rate.  I dont know what else i might be doing wrong, once placed perturb to 
1, and internally(kernel) am using PSCHED_CPU and a sfq buffer length of 15 
as against 128. (notes on docum.org) to try and increase speed.  (Processor 
has TSC flag)

Would be much obliged on any comments/improvements i can make on the script.

Using kernel 2.4.22

TIA

K

_________________________________________________________________
MSN Shopping upgraded for the holidays!  Snappier product search... 
http://shopping.msn.com