[ previous ] [ next ] [ threads ]
 From:  Michael Brown <knightmb at knightmb dot dyndns dot org>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Bridged upstream shaping only working on OPT1 inbound
 Date:  Tue, 29 Jan 2008 16:16:16 -0600
You want to use the WAN in the "out" direction, which I thought the 
shaping wizard already does that (at least from memory it always did). 
By design, both are correct, as anything going "out" to the Internet 
would have to come "in" to the OPT1 first before going "out" the WAN. 
Kind of like the RCA stereo equipment where you have an audio input and 
output, and you have to make sure the input matches with the output when 
wiring up devices to your stereo. That's about the closest thing that 
comes to mind as a comparison.

Thing of your network like this:
Anything coming inbound (download) looks like Internet --> WAN In --> 
OPT1 Out --> Computer
Anything going outbound (upload) looks like Computer --> OPT1 In --> WAN 
Out --> Internet

Kris wrote:
> Hello. This post is more of an FYI to those who might search for a
> similar query/problem, but there is a question at the end.
> I'm using v1.233 on a Lex Light minipc on a 32MB CF with 3x built-in
> RTL8100B interfaces (rl driver), with OPT1+WAN running in bridged mode
> for my 'net connection.
> Lowering the bandwidth value of the "m_Total Download" pipe yields a
> very well-regulated lower speed on my transfer rate graphs.
> However, lowing the bandwidth value of the "m_Total Upload" pipe only
> only works when my rules apply to the OPT1 interface in the "in"
> direction. Is this correct by design, or should it also work with the
> default rules which specify the WAN interface in the "out" direction?
> Should the shaping wizard be changed to reflect this, or am I
> misunderstanding how FreeBSD/m0n0 shaping works, or something else
> (i.e. maybe I am completely clueless)?
> Thanks.
> -Kris
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch