forked from extern/shorewall_code
Yet more tc doc tweaks
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2877 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
95ffbbad9b
commit
e14a784c8b
@ -401,11 +401,11 @@ verb 3</programlisting>
|
||||
|
||||
<graphic fileref="images/network3.png" />
|
||||
|
||||
<para>The Wireless zone is in the lower right of the diagram and consists
|
||||
of two laptops: Eastepnc6000 (Windows XP - SP1) and Tipper (SuSE 10.0). We
|
||||
use OpenVPN to bridge those two laptops with the Local Zone shown in the
|
||||
lower left hand corner. The laptops are configured with addresses in the
|
||||
192.168.3.0/24 network connected to the firewall's <filename
|
||||
<para>The Wireless network is in the lower right of the diagram and
|
||||
consists of two laptops: Eastepnc6000 (Windows XP - SP1) and Tipper (SuSE
|
||||
10.0). We use OpenVPN to bridge those two laptops with the local LAN shown
|
||||
in the lower left hand corner. The laptops are configured with addresses
|
||||
in the 192.168.3.0/24 network connected to the firewall's <filename
|
||||
class="devicefile">eth0</filename> interface which places them in the
|
||||
firewall's <emphasis role="bold">Wifi</emphasis> zone. OpenVPN bridging
|
||||
allows them to be assigned an additional temporary IP address from the
|
||||
|
@ -157,7 +157,7 @@
|
||||
<firstterm>marking</firstterm> packets. Packet marks have a numberic
|
||||
value which is limited in Shorewall to the values 1-255. You assign
|
||||
packet marks to different types of traffic using entries in the
|
||||
<filename>/etc/shorewall/tcrules</filename> file. </para>
|
||||
<filename>/etc/shorewall/tcrules</filename> file.</para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
|
||||
@ -603,11 +603,11 @@ ppp0 6000kbit 700kbit</programlisting>
|
||||
<section>
|
||||
<title>tcclasses file</title>
|
||||
|
||||
<programlisting>#INTERFACE MARK RATE CEIL PRIORITY OPTIONS
|
||||
ppp0 1 10kbit 50kbit 1 tcp-ack
|
||||
<programlisting>#INTERFACE MARK RATE CEIL PRIORITY OPTIONS
|
||||
ppp0 1 10kbit 50kbit 1 tcp-ack
|
||||
ppp0 2 300kbit full 2
|
||||
ppp0 3 300kbit full 2
|
||||
ppp0 4 90kbit 200kbit 3 default</programlisting>
|
||||
ppp0 4 90kbit 200kbit 3 default</programlisting>
|
||||
|
||||
<para>We add a class for tcp ack packets with highest priority, so
|
||||
that downloads are fast. The following 2 classes share most of the
|
||||
@ -619,8 +619,8 @@ ppp0 4 90kbit 200kbit 3 default</program
|
||||
<section>
|
||||
<title>tcrules file</title>
|
||||
|
||||
<programlisting>#MARK SOURCE DEST PROTO PORT(S) CLIENT USER
|
||||
# PORT(S)
|
||||
<programlisting>#MARK SOURCE DEST PROTO PORT(S) CLIENT USER
|
||||
# PORT(S)
|
||||
1:P 0.0.0.0/0 0.0.0.0/0 icmp echo-request
|
||||
1:P 0.0.0.0/0 0.0.0.0/0 icmp echo-reply
|
||||
2:P 192.168.2.23 0.0.0.0/0 all
|
||||
|
Loading…
Reference in New Issue
Block a user