0

I'd like to shape my network traffic according to the following rules:

  1. All traffic from one specific IP has lowest priority
  2. All HTTPS traffic shall have medium priority
  3. All SSH traffic shall have highest priority

I'm using Shorewall on my Linux/Debian router. The external interface is eth1, the internal interface is eth0. The specific IP 192.168.10.3 is the only client on virtual interface eth0:0.

I have:

/etc/shorewall/shorewall.conf:

...
TC_ENABLED=Simple
...

/etc/shorewall/tcinterfaces

#INTERFACE             TYPE          IN-BANDWIDTH        OUT-BANDWIDTH
eth1                   External         0               1000kbit

/etc/shorewall/tcpri

#BAND   PROTO   PORT(S)         ADDRESS         INTERFACE       HELPER
3       -       -               192.168.10.3    -               -
# prioritize ssh connections
1       TCP     22              -               -               -
# drop https connections
2       TCP     443             -               -               -

But still any leaching https traffic (like streaming services, automatic updates, etc) from 192.168.10.3 makes SSH connections unusable.

I'd like to restrict/limit traffic to/from 192.168.10.0/24 in either direction, but outgoing would be great in first place as this mainly seems to block my SSH connections.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.