#
# Shorewall version 4 - Tcclasses File
#
# For information about entries in this file, type "man shorewall-tcclasses"
#
# See http://shorewall.net/traffic_shaping.htm for additional information.
#
###############################################################################
#INTERFACE	MARK	RATE	CEIL	PRIORITY	OPTIONS
#
# ------ traffic going IN on EXT_IF --------------

$DMZ_IF		21	20kbit	$IN_EXT_BND	2
$DMZ_IF		22	90kbit	$IN_EXT_BND	3
$DMZ_IF		23	70kbit	$IN_EXT_BND	4
$DMZ_IF		24	40kbit	$IN_EXT_BND	7
$DMZ_IF		20	100mbit	full		20		default

# -- ORG1

$INT1_IF	31	50kbit	$IN_EXT_BND	4
$INT1_IF 	32	45kbit	$IN_EXT_BND	3		
$INT1_IF	33	70kbit	$IN_EXT_BND	2
$INT1_IF	34	 5kbit	64kbit		4
$INT1_IF	30	100mbit	full		20		default

# -- ORG2

$INT2_IF	41	20kbit	full		6
# $INT2_IF	42	30kbit	full		5
$INT2_IF	44	 5kbit	96kbit		6
$INT2_IF	40	15kbit	full		20		default

# -- ORG3

$INT3_IF	51	25kbit	full		5
$INT3_IF	54	 5kbit	64kbit		5
$INT3_IF	50	100mbit	full		20		default

# -------------- total 500kbit ----------

# ------ traffic going IN/OUT on EXT_IF --------------

$EXT_IF		1	10kbit	full		1		tcp-ack,tos-minimize-delay
$EXT_IF		2	50kbit	full		2

# ------ traffic going OUT on EXT_IF --------------

$EXT_IF		11	20kbit	full		3
$EXT_IF		12	50kbit	full		4
$EXT_IF		13	30kbit	full		5
$EXT_IF		14	20kbit	full		7		
$EXT_IF		15	40kbit	full		6		
$EXT_IF		10	30kbit	full		20		default

# -------------- total 250kbit ----------


$INT2_IF	61	100kbit	full		4
$INT2_IF	62	100kbit	full		4
$DMZ_IF		63	200kbit	$IN_INT2_BND	6
$INT1_IF	64	200kbit	$IN_INT2_BND	6


#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
