[bwm-tools-tech] Failed to ACCEPT packet
Brought to you by:
nkukard
From: Victor Y. <ye...@nd...> - 2005-05-12 08:56:08
|
i followed the example as in BWM documentation. I got a "Failed to = ACCEPT packet" error from bwmd, when i run bwmd and ftp connection at the same time. Why? victor =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3Dquote=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Imagine you would like your linux router to rate limit all traffic from = and to IP 192.168.1.100, an example of this can be found below...=20 Configuring iptables=20 iptables -t filter -A FORWARD -m mark ! --mark 0x0 -j = QUEUE iptables -t mangle -A FORWARD -s 192.168.1.100 -j MARK = --set-mark 100 iptables -t mangle -A FORWARD -d 192.168.1.100 -j MARK = --set-mark 101 =20 Configuring bwmd=20 <firewall> <global> <modules> <load name=3D"ip_queue"/> </modules> </global> =20 # Traffic flows <traffic> <flow name=3D"pc_in" max-rate=3D"64000" = report-timeout=3D"60" nfmark=3D"100" /> <flow name=3D"pc_out" max-rate=3D"64000" = report-timeout=3D"60" nfmark=3D"101" /> </traffic> </firewall> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3Dend = quote=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D |