> is dropping packets the proper way to slow down traffic on a network? No. If you drop packets randomly you will break existing connetions. If you drop incomming SYN packets, it is okay, but one connection can eat up lots of bandwith anyway.
I think quota match is not the best way to do it. You can not, using netfilter, force the packets to carry less data. I recommend using Class Based Queueing. Please read Advanced Routing HOWTO. > (using the bytelimit match). i have somone who is complaining that > as soon as he tries to transfer mass amounts of data with scp, the > connection is dropped. he is using freebsd, could this be the problem? if you are using quota match and are dropping some packets, it could be it. Best regards, Maciej Soltysiak
