diff --git a/Shorewall/Documenation b/Shorewall/Documenation index f599bea29..7a944f499 100644 --- a/Shorewall/Documenation +++ b/Shorewall/Documenation @@ -1982,8 +1982,9 @@ Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. You want this mainly if you have a DSL or Cable connection to avoid queuing at your providers side. - If you don't want any traffic to be dropped set this - to a value faster than your interface. + If you don't want any traffic to be dropped, set this + to a value to zero in which case Shorewall will not + create an ingress qdisc. Use kbit or kbps(for Kilobytes per second) for speed, and make sure there is NO space between the diff --git a/Shorewall/lib.tc b/Shorewall/lib.tc index 68c5aac7e..47f40b7cd 100644 --- a/Shorewall/lib.tc +++ b/Shorewall/lib.tc @@ -193,7 +193,7 @@ setup_traffic_shaping() save_command "${dev}_mtu=\$(get_device_mtu $device)" run_tc "class add dev $device parent $devnum: classid $devnum:1 htb rate $outband mtu \$${dev}_mtu" - if [ ${inband} -gt 0 ]; then + if [ $(rate_to_kbit ${inband}) -gt 0 ]; then run_tc qdisc add dev $device handle ffff: ingress run_tc filter add dev $device parent ffff: protocol ip prio 50 u32 match ip src 0.0.0.0/0 police rate ${inband} burst 10k drop flowid :1 fi