› Forums › Network Management › Firewall, Traffic Shaping and Net Balancer › Classifier not working correctly
- This topic is empty.
-
AuthorPosts
-
April 1, 2010 at 12:56 am #42317
Eliminateur
MemberI’m testing the classifier with an HTTPS download from a known server, so i set to download the file and create the rule:
MARK all opt — in * out * 0.0.0.0/0 -> 91.121.88.xxx MARK set 0x11i assign it to my ETH00 interface as it’s DOWNSTREAM traffic, activate changes… 0 bits, whilst i’m downloading @200K, i see all the traffic goes to default shaper….
ok, so i change the rule to put the ip as SOURCE, same thing…i loaded wireshark on my PC and it correctly shows the incoming IP as the originating one.
what am i doing wrong?
The other part not working is P2P control, i built rules:
* * MARK tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp spt:3827 MARK set 0xb P2PUL yes
5 * * MARK udp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp spt:3827 MARK set 0xb P2PUL no
6 * * MARK tcp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:3827 MARK set 0xc P2PDL no
7 * * MARK udp opt — in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:3827 MARK set 0xc P2PDL no3827 is the TCP/UDP port my P2P app uses.
i put the P2PUL rules in the PPP0 IF, as they’re the “upload” ones with source port of 3827
then i put the P2PDL rules in the ETH0 with dst port 3827
theoretically this should work like a charm…very few packets marked…
April 1, 2010 at 12:58 am #49981Eliminateur
MemberAfter some more fiddling i tested a rule and explicitly selected an interface for input and output and voila!, now it detects and works….
this is obviously a bug, because, for example, i want to limit IRC, instead of building a simple L7 classifier and assigning it to both interfaces now i have to create 2 rules and 2 classifiers for each direction(in ppp and out ppp) which sucks
addendum 1: more testing
i cannot limit P2P upload, i built a rule with source ip and source port:
4 * * MARK tcp opt — in * out * 192.168.2.9 -> 0.0.0.0/0 tcp spt:3827 MARK set 0xb P2PUL yesit marks packets but WAAAAY below what it should, i mean, it’smarking 40kbits with a 40kbit max limit but on the emule side i see it happily uploading @80kbits….
-
AuthorPosts
- You must be logged in to reply to this topic.