Re: [Shorewall-users] Shorewall and IPP2P

[Tom E. <te...@sh...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mario R. Pizzolanti wrote:
>>-----Original Message-----
>>From: sho...@li...
>>Behalf Of Tom Eastep
>>Sent: Sunday, October 17, 2004 10:51 PM
>>Mario R. Pizzolanti wrote:
>>
>>>Hi!
>>>I'm wondering whether anyone has successfully set up a
>>
>>bandwidth control
>>
>>>system using ipp2p and shorewall.  I have been able to drop
>>
>>connecions
>>
>>>altogether, but I don't seem to be able to get CONNMARK working with
>>
>>ipp2p.
>>
>>>Any pointers would be greatly appreciated :)
>>
>>I've gone out on a limb and added ipp2p/CONNMARK support to the
>>Shorewall development thread (CVS Shorewall2). This is in stark
>>violation of my usual policy of not providing explicit
>>Shorewall support
>>for Patch-O-Matic[-NG] features and we will see how this experiment
>>goes. Just remember that the Shorewall lists are not
>>appropriate forums
>>for asking questions about building kernels or about building iptables
>>or for whining about how Patch-O-Matic-ng doesn't work with
>>your kernel
>>source tree.
>>
>>- -Tom
>
>
> Great news!  Thanks!
> I just downloaded latest cvs and installed it.  I already have ipp2p and
> CONNMARK compiled into the kernel and iptables.
> I'm currently using htb for port/destination based traffic shaping.
> I have been able to completely turn off p2p/bt traffic using DROP, but
> that's not really what I want to do.  What's needed is load control, not
> complete lockout.
> I just need some pointers on how to set up CONNMARK.  I don't seem to
> understand how to set that up correctly :(  The main point I don't seem to
> understand, I guess, is the difference between the marks set by
CONNMARK and
> MARK...

I'm sorry but I just don't have time today to teach you how to use MARK
and CONNMARK. I'll try to write something up in the next day or two.

- -Tom
- --
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ te...@sh...
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBdAN2O/MAbZfjDLIRAvC8AKCCM4hVmUXCPSoG9QCFs06JlXMviwCfYSCi
ariecuZoonSCvQNqMSSvfNY=
=R4hF
-----END PGP SIGNATURE-----