Mona Meyer wrote:
> Hello out there,
> 
> I am using shorewall 3.2.6 on Debian Etch
> 
> I used the example files from the debian shorewall packages to configure
> traffic shaping:
> 
> /etc/shorewall/tcclasses:
> ppp0  1  100kbit  1000kbit   1  tos=0x68/0xfc,tos=0xb8/0xfc      # VOIP
> ppp0  2  full/4   full      2  tcp-ack,tos-minimize-delay       # ssh/telnet
> ppp0  3  full/4   full      3  default                          # all other
> ppp0  4  full/8   full*8/10 4                                   #
> underprivileged
> 
> /etc/shorewall/tcdevices:
> ppp0            18000kbit        900kbit
> 
> /etc/shorewall/tcrules:
> 1        0.0.0.0/0 <http://0.0.0.0/0> 0.0.0.0/0 <http://0.0.0.0/0>   
> icmp    echo-request
> 1        0.0.0.0/0 <http://0.0.0.0/0> 0.0.0.0/0 <http://0.0.0.0/0>   
> icmp    echo-reply
> 2        0.0.0.0/0 <http://0.0.0.0/0> 0.0.0.0/0 <http://0.0.0.0/0>   
> udp     5060
> 2        0.0.0.0/0 <http://0.0.0.0/0> 0.0.0.0/0 <http://0.0.0.0/0>   
> udp     -       5060
> 4        0.0.0.0/0 <http://0.0.0.0/0> 0.0.0.0/0 <http://0.0.0.0/0>   
> udp    4666
> 
> 
> I started shorewall and everything seemed to work. But after some time I
> realised that the connection was pretty slow. I ran some "speed tests"
> on the web, and they all showed an average speed of approx. 2.000kbit/s.
> 
> I moved the files tcclasses, tcrules and tcdevices to /tmp and restarted
> shorewall and the speedtest showed a speedrange up to 18.000kbit/s.
> 
> Any ideas what I did wrong?

Not without seeing the output of 'shorewall dump' gathered when
performance was bad.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to