Hello Marek,

> Hi, can you help me?

Probably.

> 
> My monowall setting:
> LAN- 192.168.0.1/24
> WAN-192.168.100.1/24;dfgtw 192.168.100.100(:-) I am nating behind nat)
> 
> Firewall rules:
> Pass-LAN-Proto(any)-Source(network 192.168.0.0/24)-Destination(any)
> Block-Wan-Proto(any)-Source(any)-Destination(192.168.0.0/24)
> 
> And Shaper rules
> 
> Rule=Target(Pipe1)-Interface(WAN)-Proto(any)-Source(192.168.0.10)-
> Dest(any)-Direction(in)-Tcp
> flags(all)
> Pipe = Bandwidth(64kbit/s)-mask(none)
> 
> The i-net line is 160/160Kb/s, but when 192.168.0.10 starts download from
> WWW,
> shapping takes no effect and download is about 150Kb/s. What's wrong?
> 

If you want to shape www download that is done by the host 192.168.0.10, you
want to put SOURCE=any and DEST=192.168.0.10, Direction=in. That would give
the desired effect.

> 
> Thanx for answers
> Marek

// Thomas Hertz