RE: Traffic Shaper Rules Question

Steve Yates <[email protected]> Wed, 21 Aug 2013 13:50:52 -0500
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
(reposting to the list since I always forget this list doesn't set the reply-to as the list address...)

> 1.       I created an alias of network ip range of the suspected users.
> 
> 2.       Then I created a traffic shaper pipe of 512Kbps
> 
> 3.       Then I entered a traffic shaper rule and choose the interface WAN
> and the intended alias.

	I don't know if that's incorrect, per se, but we used queues as well
based on the examples I found.  I think yours will work, but our rule has:

Target: queue
Source: any
Destination: alias

The queue points to the desired pipe, with a "weight" option.  My example
would be for downloading to the alias IP(s).  We have a matching/reverse
rule for source=alias, destination=any for uploading.

If you view the Status/Traffic Graph page while they are downloading
something big you should see it capped.

	In addition the "Magic shaper wizard" will create a default set of
rules based on deprioritizing peer to peer file sharing traffic.  It will
delete what you have but it will provide examples and a starting point where
you can modify the pipes/queues/etc.


--

Steve Yates
ITS, Inc.