From owner-freebsd-isp Sat Feb 24 20:40:50 2001 Delivered-To: freebsd-isp@freebsd.org Received: from ren.sasknow.com (ren.sasknow.com [207.195.92.131]) by hub.freebsd.org (Postfix) with ESMTP id 669D537B4EC for ; Sat, 24 Feb 2001 20:40:47 -0800 (PST) (envelope-from ryan@sasknow.com) Received: from localhost (ryan@localhost) by ren.sasknow.com (8.9.3/8.9.3) with ESMTP id WAA33918; Sat, 24 Feb 2001 22:40:44 -0600 (CST) (envelope-from ryan@sasknow.com) Date: Sat, 24 Feb 2001 22:40:44 -0600 (CST) From: Ryan Thompson To: Jason Terlecki Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Limiting Bandwidth In-Reply-To: <552BB9A0AF05D411B71C0050DAC2756197C134@LOOKEX.look> Message-ID: Organization: SaskNow Technologies [www.sasknow.com] MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Jason Terlecki wrote to freebsd-isp@FreeBSD.ORG: > Good day, > > Anyone have an idea how I could limit how much bandwidth specific > users can use off a shell. I want to make sure normal users dont use > up all the bandwidth, while staff and specific users could use more. You probably won't be able to do this with ipfw(8) and the traffic shaper alone, because you want to restrict bandwidth by user or group. Most traffic filters/shapers work at the IP level. They have no notion of users or groups, nor should they. HOW do you actually want to restrict the bandwidth? For a shell? You'll need to tell us more about your situation and what you want to accomplish. There may be an easier way to do what you set out to. Shooting in the dark, here: As a general approach, maybe you could try setting up a couple of network interfaces--and you can probably accomplish this on a single machine. Give staff/specific users a different hostname to connect to than normal users, and bind different login servers to each address. Allow only staff to log in to one, and do not limit incoming/outgoing traffic to/from that host. Give normal users access to the other host, but limit bandwidth on that address as you see fit. > Regards, > > Jason Terlecki > > . > > ------------------------------------------------------------------------- > This email server is running an evaluation copy of the MailShield anti- > spam software. Please contact your email administrator if you have any > questions about this message. MailShield product info: www.mailshield.com > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > -- Ryan Thompson Network Administrator, Accounts SaskNow Technologies - http://www.sasknow.com #106-380 3120 8th St E - Saskatoon, SK - S7H 0W2 Tel: 306-664-3600 Fax: 306-664-1161 Saskatoon Toll-Free: 877-727-5669 (877-SASKNOW) North America To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message