Re: iptables limit speed of SAMBA

2008/7/2 yuan shijiang <yshijiang@...>:
> iptables  -A OUTPUT -p tcp -o eth0- -s 192.168.1.0/24  --sport 445 -m
> hashlimit --hashlimit 20/sec --hashlimit-mode dstip --hashlimit-name
> samba -j ACCEPT
> iptables  -A OUTPUT -p tcp -o eth0- -s 192.168.1.0/24  --sport 445 -j REJECT

If you REJECT a packet isn't that going to close the connection?

Last time I needed to do linux traffic shaping I used the tc stuff
described here: http://lartc.org/howto/

The HOWTO is pretty scary, but there's an example script here:
http://lartc.org/howto/lartc.cookbook.ultimate-tc.html

cheers,
 Jamie
--
Jamie Riden / jamesr@... / jamie@...
UK Honeynet Project: http://www.ukhoneynet.org/