From owner-freebsd-isp Sat Feb 24 20:55:13 2001 Delivered-To: freebsd-isp@freebsd.org Received: from oneway.com (daedal.oneway.com [205.252.89.49]) by hub.freebsd.org (Postfix) with ESMTP id 0AEE937B491 for ; Sat, 24 Feb 2001 20:55:11 -0800 (PST) (envelope-from jay@oneway.com) Received: from localhost (jay@localhost) by oneway.com (8.9.3/8.9.3) with ESMTP id XAA32179; Sat, 24 Feb 2001 23:57:19 -0500 (EST) (envelope-from jay@oneway.com) Date: Sat, 24 Feb 2001 23:57:19 -0500 (EST) From: Jay Kuri To: Ryan Thompson Cc: Jason Terlecki , freebsd-isp@FreeBSD.ORG Subject: Re: Limiting Bandwidth In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > Anyone have an idea how I could limit how much bandwidth specific > > users can use off a shell. I want to make sure normal users dont use > > up all the bandwidth, while staff and specific users could use more. > > You probably won't be able to do this with ipfw(8) and the traffic shaper > alone, because you want to restrict bandwidth by user or group. Most > traffic filters/shapers work at the IP level. They have no notion of > users or groups, nor should they. Actually, You can do this with ipfw. I don't know when it appeared, but from the ipfw(8) man page on a 4.2 machine: --- snip --- options: [ . . . ] uid user Match all TCP or UDP packets sent by or received for a user. A user may be matched by name or identification number. gid group Match all TCP or UDP packets sent by or received for a group. A group may be matched by name or identification number. --- snip --- Never tried it... but it is there. Jay To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message