Here is a bad example to play with:

$IPTABLES -A FORWARD -p TCP \
   -d $WEBSRV --dport 80 -m limit \
   --limit 1000/second --limit-burst 5 \
   -j ACCEPT

Good luck!

>>> cdf123 at cdf123.com 11/04/02 08:28AM >>>
When I get this done, I'll reply to my original post on what I did.  I
KNOW it can be done, but it may take a bit of digging, reading,
caffeine, hacking, swearing, and drinking.  ;-) 

On Fri, 2002-11-01 at 18:44, Shawn Fertch wrote: 
    No clue Chris, but I'd be interested in how you accomplish this as
well.
     I've got plans to replace my current firewall machine (P166/128MB
ram)
    in the not so distant future and build/customize more of it myself
as
    it's a Smoothwall install.
    
    Shawn
    
    
    
    On 01 Nov 2002 17:17:22 -0600
    Chris Frederick <cdf123 at cdf123.com> wrote:
    
    > Hi all, got a good one for ya.
    > 
    > I'm about to upgrade my Internet connection from a 56k dialup to
an
    > 144k IDSL.  I was just wondering if anyone had any info on some
    > bandwidth throttling.  I'd like to limit bandwidth used for
services
    > (ssh, ftpd-maybe, httpd) and apps.  I'd like to be able to access
my
    > server machine remotely, wget the latest isos/rpms/tar.gzs, and
still
    > be able to route net access (online games, web, email) for my
other 3
    > machines without any one service/app/machine hogging all my
bandwidth.
    > 
    > I think I can do this with iptables (never looked into it much)
or
    > maybe even xinetd? (never looked into it at all), but I'm not
sure how
    > intelligent these are, or if they're even the right apps to do
it. 
    > I'd hate to download an iso at 20kps when nothing else is
accessing
    > the net, and I'd hate to allow a limit to ftp when I'm the only
one
    > who will ever use it and that could at max be 2-3 times a month.
    > 
    > Well those are the key points I'm looking for answers on.  Any
advice,
    > info (man, howto, etc), or horror/success stories would be great.
 I
    > got about a month before I get hooked up I'm sure, so I got some
good
    > reading/planning time on my hands.
    > 
    > Thanks again in advance.
    > Chris Frederick
    > 
    > p.s.  In case it matters, the server routing all this is a AMD
Athlon
    > 800Mhz, 384M SDRAM (might be 512M, I keep forgetting), running
    > Mandrake 8.2 that may change to 9.0, or even to Red Hat or
Slackware
    > depending on how much time I have to configure it.
    > 
    _______________________________________________
    Twin Cities Linux Users Group Mailing List - Minneapolis/St. Paul,
Minnesota
    http://www.mn-linux.org tclug-list at mn-linux.org 
    https://mailman.mn-linux.org/mailman/listinfo/tclug-list 
    
    
    


_______________________________________________
Twin Cities Linux Users Group Mailing List - Minneapolis/St. Paul,
Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org 
https://mailman.mn-linux.org/mailman/listinfo/tclug-list