Re: [squid-users] Re: tcp_outgoing_address & CONNMARK

--- Henrik Nordstrom <hno@squid-cache.org> wrote:
> On Fri, 21 Jan 2005, Rio Martin wrote:
> > Thanks for forwarding my question to list, Henrik.
> > Actually this is a little bit confusing, whether to post it to
> squid-users or
> > to netfilter list. But i feel this is much related to netfilter :))
> Crossposting this kind of border questions on both lists is OK. I can't
> however as I am not a subscriber to the netfilter user list (only the
> developer list).

Okay, you'll find my post to netfilter list below.
Actually by using tcp_outgoing_addres, i hope i'll be able to manage and
limit bandwidth for all classes i have defined in ACL. What i'm goin to use
is iptables marking with TC.

But the problem is, if i run squid from the same box with tc and gateway NAT
router, i'm still cant figure it out how. Because all incoming packets from
internet interface only knew and recognize my public ip, not the private IPs
i ve defined in tcp_outgoing_address.

I ve tried delaypools, but i am not so happy until now.

Regards,
Rio Martin.

---- Posted to NETFILTER ----
Dear all,
I am so confuse classifying the correct packets into mangle table.
Here i describe the situation.

LAN ---- :eth1 [ LINUX-BOX ] eth0: ---- INTERNET
eth0 220.1.1.1
eth0:1 192.168.1.1
eth0:2 192.168.1.2
eth1 10.10.10.1 [network 10.10.10.0/24]

I ve those two private IP aliases in eth0 and those get NATed to 220.1.1.1
before reaching the internet.

I need to shape those two IPs in TC, but i am confuse how to classify it on
mangle table. I need to shape the incoming and outgoing packets from those
two IPs.

Need help, thanks ..

Regards,
Rio Martin.
Received on Fri Jan 21 2005 - 03:48:24 MST