[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[no subject]
- <!--x-content-type: text/plain -->
- <!--x-date: Wed May 25 19:36:16 2005 -->
- <!--x-from-r13: genafnz ng irelfrpheryvahk.pbz (Pbo Fbkra) -->
- <!--x-message-id: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: 1116948992.7279.99.camel@localhost -->
- <!--x-reference: [email protected] -->
- <!--x-reference: [email protected] -->
- <!--x-reference: 1116953545.7279.138.camel@localhost --> "http://www.w3.org/TR/html4/loose.dtd">
- <!--x-subject: [ale] iptables TOS (was: b'bye) -->
- <li><em>date</em>: Wed May 25 19:36:16 2005</li>
- <li><em>from</em>: transam at verysecurelinux.com (Bob Toxen)</li>
- <li><em>in-reply-to</em>: <1116953545.7279.138.camel@localhost></li>
- <li><em>references</em>: <<a href="msg00826.html">[email protected]</a>> <<a href="msg00828.html">[email protected]</a>> <<a href="msg00838.html">[email protected]</a>> <<a href="msg00846.html">[email protected]</a>> <<a href="msg00847.html">[email protected]</a>> <1116948992.7279.99.camel@localhost> <<a href="msg00851.html">[email protected]</a>> <<a href="msg00860.html">[email protected]</a>> <1116953545.7279.138.camel@localhost></li>
- <li><em>subject</em>: [ale] iptables TOS (was: b'bye)</li>
Bob Toxen
bob at verysecurelinux.com [Please use for email to me]
<a rel="nofollow" href="http://www.verysecurelinux.com";>http://www.verysecurelinux.com</a> [Network&Linux/Unix security consulting]
<a rel="nofollow" href="http://www.realworldlinuxsecurity.com";>http://www.realworldlinuxsecurity.com</a> [My book:"Real World Linux Security 2/e"]
Quality Linux & UNIX security and SysAdmin & software consulting since 1990.
"Microsoft: Unsafe at any clock speed!"
-- Bob Toxen 10/03/2002
On Tue, May 24, 2005 at 12:52:25PM -0400, Jim Popovitch wrote:
> On Tue, 2005-05-24 at 12:29 -0400, Christopher Fowler wrote:
> > On Tue, 2005-05-24 at 11:40, James Sumners wrote:
> > > I am interested in controlling the bandwith of specific protocols
> > > across a whole network.
> >
> > What I want to do too. I want to be sure that all traffic leaving my
> > network with a destination of port 25 has extremely low priority. And
> > at most can consume no more than 10% of the total bandwidth. I also
> > want my VOIP Packet8 device to have very high priority. My firewall is
> > a 2.4.X machine so I'm sure things are different in 2.6.X vs 2.4.X.
> Iptables works on 2.4.x, I'm using it on several Redhat 7.3 boxes
> (kernel 2.4.20) and 2.6.11 boxes
> The problem w/ 10% is not something that (afaik) iptables can address.
> That is a more advanced routing feature.
> Here's some examples of what you can do with iptables, modify
> accordingly:
> #Slow down GoogleBot
> iptables -A INPUT -i eth* -p tcp -s 64.68.82.0/24 -m tos --tos
> Minimize-Cost
> iptables -A OUTPUT -o eth* -p tcp -d 64.68.82.0/24 -m tos --tos
> Minimize-Cost
> #give high priority (Maximize-Reliability) status to SSH
> iptables -A INPUT -i eth* -p tcp --dport 22 -m tos --tos
> Maximize-Reliability
> iptables -A OUTPUT -o eth* -p tcp --sport 22 -m tos --tos
> Maximize-Reliability
> #give high priority (Minimize-Delay) to http traffic
> iptables -A INPUT -i eth* -p tcp --dport 80 -m tos --tos Minimize-Delay
> iptables -A OUTPUT -o eth* -p tcp --sport 80 -m tos --tos Minimize-Delay
> #give low priority (Minimize-Cost) status to in/out smtp traffic
> iptables -A INPUT -i eth* -p tcp --dport 25 -m tos --tos Minimize-Cost
> iptables -A OUTPUT -o eth* -p tcp --dport 25 -m tos --tos Minimize-Cost
> see "iptables -m tos -h' for other TOS values.
> -Jim P.
</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00826" href="msg00826.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jsheets at yahoo.com (Jerald Sheets)</li></ul></li>
<li><strong><a name="00828" href="msg00828.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jrickman at gmail.com (Jonathan Rickman)</li></ul></li>
<li><strong><a name="00838" href="msg00838.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00846" href="msg00846.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> groups at ChangingLINKS.com (ChangingLINKS.com)</li></ul></li>
<li><strong><a name="00847" href="msg00847.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00850" href="msg00850.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> jimpop at yahoo.com (Jim Popovitch)</li></ul></li>
<li><strong><a name="00851" href="msg00851.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> james.sumners at gmail.com (James Sumners)</li></ul></li>
<li><strong><a name="00860" href="msg00860.html">[ale] b'bye</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00863" href="msg00863.html">[ale] iptables TOS (was: b'bye)</a></strong>
<ul><li><em>From:</em> jimpop at yahoo.com (Jim Popovitch)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00937.html">[ale] Sound of Silence</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00939.html">[ale] NIC troubles</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00881.html">[ale] iptables TOS</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00945.html">[ale] QoS talk</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00938"><strong>Date</strong></a></li>
<li><a href="threads.html#00938"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>