[no subject]

Iptables works on 2.4.x, I'm using it on several Redhat 7.3 boxes
(kernel 2.4.20) and 2.6.11 boxes

The problem w/ 10% is not something that (afaik) iptables can address.
That is a more advanced routing feature.

Here's some examples of what you can do with iptables, modify
accordingly:

#Slow down GoogleBot
iptables -A INPUT -i eth* -p tcp -s 64.68.82.0/24 -m tos --tos
 Minimize-Cost
iptables -A OUTPUT -o eth* -p tcp -d 64.68.82.0/24 -m tos --tos
 Minimize-Cost

#give high priority (Maximize-Reliability) status to SSH
iptables -A INPUT -i eth* -p tcp --dport 22 -m tos --tos
 Maximize-Reliability
iptables -A OUTPUT -o eth* -p tcp --sport 22 -m tos --tos
 Maximize-Reliability

#give high priority (Minimize-Delay) to http traffic
iptables -A INPUT -i eth* -p tcp --dport 80 -m tos --tos Minimize-Delay
iptables -A OUTPUT -o eth* -p tcp --sport 80 -m tos --tos Minimize-Delay

#give low priority (Minimize-Cost) status to in/out smtp traffic
iptables -A INPUT -i eth* -p tcp --dport 25 -m tos --tos Minimize-Cost
iptables -A OUTPUT -o eth* -p tcp --dport 25 -m tos --tos Minimize-Cost


see "iptables -m tos -h' for other TOS values.

-Jim P.








</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00873" href="msg00873.html">[ale] iptables TOS (was: b'bye)</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00938" href="msg00938.html">[ale] iptables TOS (was: b'bye)</a></strong>
<ul><li><em>From:</em> transam at verysecurelinux.com (Bob Toxen)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00826" href="msg00826.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jsheets at yahoo.com (Jerald Sheets)</li></ul></li>
<li><strong><a name="00828" href="msg00828.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jrickman at gmail.com (Jonathan Rickman)</li></ul></li>
<li><strong><a name="00838" href="msg00838.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00846" href="msg00846.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> groups at ChangingLINKS.com (ChangingLINKS.com)</li></ul></li>
<li><strong><a name="00847" href="msg00847.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00850" href="msg00850.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jimpop at yahoo.com (Jim Popovitch)</li></ul></li>
<li><strong><a name="00851" href="msg00851.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> james.sumners at gmail.com (James Sumners)</li></ul></li>
<li><strong><a name="00860" href="msg00860.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00862.html">[ale] tomcat woes</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00864.html">[ale] Sound of Silence</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00861.html">[ale] b'bye</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00873.html">[ale] iptables TOS (was: b'bye)</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00863"><strong>Date</strong></a></li>
<li><a href="threads.html#00863"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>