[no subject]

1.  What is TOS vs QoS?
2.  I've seen other commands used instead of iptables
    when doing QoS.
3.  Is it possible to limit bandwidth from a specific internal IP 
    address no matter the load.  Can I say that 192.168.1.5 can only 
    have up to 5% of the bandwidth period.  No bursting based on load?

People sending attachments on our network can use up almost all our
bandwidth so I want to protect it.


On Tue, 2005-05-24 at 12:52, Jim Popovitch wrote:
> On Tue, 2005-05-24 at 12:29 -0400, Christopher Fowler wrote:
> > On Tue, 2005-05-24 at 11:40, James Sumners wrote:
> > > I am interested in controlling the bandwith of specific protocols
> > > across a whole network.
> > 
> > What I want to do too.  I want to be sure that all traffic leaving my
> > network with a destination of port 25 has extremely low priority.  And
> > at most can consume no more than 10% of the total bandwidth.  I also
> > want my VOIP Packet8 device to have very high priority.  My firewall is
> > a 2.4.X machine so I'm sure things are different in 2.6.X vs 2.4.X. 
> 
> Iptables works on 2.4.x, I'm using it on several Redhat 7.3 boxes
> (kernel 2.4.20) and 2.6.11 boxes
> 
> The problem w/ 10% is not something that (afaik) iptables can address.
> That is a more advanced routing feature.
> 
> Here's some examples of what you can do with iptables, modify
> accordingly:
> 
> #Slow down GoogleBot
> iptables -A INPUT -i eth* -p tcp -s 64.68.82.0/24 -m tos --tos
>  Minimize-Cost
> iptables -A OUTPUT -o eth* -p tcp -d 64.68.82.0/24 -m tos --tos
>  Minimize-Cost
> 
> #give high priority (Maximize-Reliability) status to SSH
> iptables -A INPUT -i eth* -p tcp --dport 22 -m tos --tos
>  Maximize-Reliability
> iptables -A OUTPUT -o eth* -p tcp --sport 22 -m tos --tos
>  Maximize-Reliability
> 
> #give high priority (Minimize-Delay) to http traffic
> iptables -A INPUT -i eth* -p tcp --dport 80 -m tos --tos Minimize-Delay
> iptables -A OUTPUT -o eth* -p tcp --sport 80 -m tos --tos Minimize-Delay
> 
> #give low priority (Minimize-Cost) status to in/out smtp traffic
> iptables -A INPUT -i eth* -p tcp --dport 25 -m tos --tos Minimize-Cost
> iptables -A OUTPUT -o eth* -p tcp --dport 25 -m tos --tos Minimize-Cost
> 
> 
> see "iptables -m tos -h' for other TOS values.
> 
> -Jim P.
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
&gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00876" href="msg00876.html">[ale] iptables TOS (was: b'bye)</a></strong>
<ul><li><em>From:</em> jimpop at yahoo.com (Jim Popovitch)</li></ul></li>
<li><strong><a name="00877" href="msg00877.html">[ale] iptables TOS (was: b'bye)</a></strong>
<ul><li><em>From:</em> jrickman at gmail.com (Jonathan Rickman)</li></ul></li>
<li><strong><a name="00881" href="msg00881.html">[ale] iptables TOS</a></strong>
<ul><li><em>From:</em> esoteric at 3times25.net (Geoffrey)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00826" href="msg00826.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jsheets at yahoo.com (Jerald Sheets)</li></ul></li>
<li><strong><a name="00828" href="msg00828.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jrickman at gmail.com (Jonathan Rickman)</li></ul></li>
<li><strong><a name="00838" href="msg00838.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00846" href="msg00846.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> groups at ChangingLINKS.com (ChangingLINKS.com)</li></ul></li>
<li><strong><a name="00847" href="msg00847.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00850" href="msg00850.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jimpop at yahoo.com (Jim Popovitch)</li></ul></li>
<li><strong><a name="00851" href="msg00851.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> james.sumners at gmail.com (James Sumners)</li></ul></li>
<li><strong><a name="00860" href="msg00860.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00863" href="msg00863.html">[ale] iptables TOS (was: b'bye)</a></strong>
<ul><li><em>From:</em> jimpop at yahoo.com (Jim Popovitch)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00872.html">[ale] Installing j2se on RHEL 3?</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00874.html">[ale] b'bye</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00863.html">[ale] iptables TOS (was: b'bye)</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00876.html">[ale] iptables TOS (was: b'bye)</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00873"><strong>Date</strong></a></li>
<li><a href="threads.html#00873"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>