Re: Tc filter does not filter

Jeremie COURREGES-ANGLAS <[email protected]>
Newsgroups gmane.linux.debian.devel.firewall
Message-ID <[email protected]>
Le lundi 07 juin 2010 à 12:54:39, Gerdriaan Mulder a écrit :
> >> I don't know much about tc, so I'm just guessing. Is it your
> >> intention to limit traffic going to SSH servers?
> >
> > Yes. To define this: I want to limit FTP tunneled through ssh (called SFTP).
> That is not called SFTP. SFTP is the file transfer possibility which is
> provided by SSH. If you tunnel FTP over SSH, it is not called SFTP. It
> is just FTP over SSH.
>
> What you are accomplishing now is simply limiting SSH traffic, not
> specifically FTP or any other traffic that you tunnel over SSH.
>
> Greetings,
> Gerdriaan Mulder
>

Hi.
OpenSSH seems to set the "Minimize delay" ToS bit on interactive SSH packets, but
not on scp / sftp packets. Maybe there's a way to use this. :)

--
"Free software, free society"
Jeremie COURREGES-ANGLAS


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/[email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.