[ previous ] [ next ] [ threads ]
 From:  "Quark AV - Hilton Travis" <Hilton at QuarkAV dot com>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall] Question on Traffic Shaper and IPSEC tunnels
 Date:  Fri, 11 Jun 2004 06:44:34 +1000
Hi Falcor,

> -----Original Message-----
> From: Falcor [mailto:falcor at netassassin dot com] 
> Sent: Friday, 11 June 2004 06:01
> To: m0n0wall at lists dot m0n0 dot ch
> Subject: [m0n0wall] Question on Traffic Shaper and IPSEC tunnels
> I realize the IPSEC VPN tunnels can not be seen by the 
> firewall engine, e.g. you can't write ACL rules.  But can the 
> tunnel itself (the connection to the remote VPN concentrator) 
> be seen by the traffic shaper?  I would like to queue and 
> dedicate a good portion of my uplink to a a vpn tunnel for 
> testing of some IP telephony, if I can guarantee the tunnel 
> is stable (not encroached upon by other traffic on the
> firewall) it would be great.

Hhmmm...  Don't know, but if the IPSEC VPN is represented in Linux by a
standard interface, such as "ppp0" in Linux, then I couldn't see why not.
The GUI wouldn't support it, tho.

Something to add to my Traffic Shaper Wish List that I recently posted on
the dev list.

Hilton Travis                        Phone: +61-(0)7-3343-3889
Manager,                             Mobile: +61 (0)419 792 394
Quark IT                             http://www.QuarkIT.com.au/
Quark AudioVisual                    http://www.QuarkAV.net/
(Brisbane, Australia)
 Network Administration, SmoothWall Firewalls, NOD32 AntiVirus
Non Linear Video Editing Solutions & Digital Audio Workstations
  Conference and Seminar AudioVisual Production and Recording
War doesn't determine who is right. War determines who is left.