ipset ip_set
- ipset utility (backport from sid)
- ipset-patched kernel (2.4.33-bsd33c+)
- modprobe ip_set
- ipset -N server ipmap --network 192.168.0.0/16
- ipset -A server 192.168.16.16
- ipset -L
-
iptables -A FORWARD -m set --set server dst,dst -j ACCEPT
| ipset ip_set | | 2006.10.19-14:35.00
Traffic shaping - tc filter.. divisor
divisor is a number of entries in given table,
where h is 'unsigned', this suggests 65535 max, but it seems that in reality it's limited to 255
Apparently, it must be in form of 2^x (1,2,4,8,16...256), otherwise you get:
for (h = 0; h <= ht->divisor; h++) {
host:~# tc filter add dev eth1 parent 1: prio 0 handle 1: protocol ip u32 divisor 17 Illegal "divisor"
| Traffic shaping - tc filter.. divisor | | 2006.10.15-00:20.00
