[email protected] wrote:
th one dysfunction:
> 
> I can not make the Ip mark work on the www traffic (while accounting can 
> do).
> (could be because of the redirect rule for transparent proxy in the 
> rules file?)

Yes. There are two ways to approach this:

a) Assuming that your incoming traffic is being shaped on your internal
interface (int-if), you can mark the www traffic in the OUTPUT chain:

        <mark>  $FW     <int-if>      tcp      -       80

b) You can implement delay pools in your Squid configuration.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to