Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Introduction to Linux - A Hands on Guide
This guide was created as an overview of the Linux Operating System, geared toward new users as an exploration tour and getting started guide, with exercises at the end of each chapter.
For more advanced trainees it can be a desktop reference, and a collection of the base knowledge needed to proceed with system and network administration. This book contains many real life examples derived from the author's experience as a Linux system and network administrator, trainer and consultant. They hope these examples will help you to get a better understanding of the Linux system and that you feel encouraged to try out things on your own.
Click Here to receive this Complete Guide absolutely free.
Hi everyone! Ive been trying to read up on bandwidth limiting for use on a firewall. I guess CBQ is the best bet for me. Does anyone have any practical examples. Ive tried to implement it but i keep getting different results.
Hey , ive gone through the 'bandwidth limiting how to ' but i am still having trouble with CBQ. I dont have a proper example to work with. For some reason the example i got doesnt work. I would like to limit bandwidth for FTP traffic. I have a FTP server in a DMZ and I would like to limit it from external and internal machines. The firewall has 3NICs. LAN, DMZ and WAN(internet). Packets are port forwarded from the LAN and WAN(Internet) interfaces to the DMZ. I used 'Postrouting' rules from iptables.
If some one initiates a FTP download from the LAN to the server in the DMZ, the traffic will try to use the full 100MB and block other potential users using the firewall as a gateway to the internet.
What example script are you running? Could you post it here, or provide a link? The info above doesn't talk how to match FTP data traffic, so I don't know how it is using the info.
The problem with filtering FTP traffic is it uses two different ways of connecting the data stream, active and passive (active means that the server connects back to the client, and passive means the server specifies a new port to the client to connect to). The easiest way is to use the iptables module to match FTP traffic, cause your probably already using it.
I assume that means port 20 (ftp-data). If the client is using passive ftp, this won't match anything. You don't need to put port 21 because it is the "control" connection and doesn't use much bandwidth.
What cbq script are you running? I'm not up on the various packages that do this? Debian has a shaper package, but it uses a syntax of RULE=<IP address>:<port>, perhaps you have it backwords?