Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 7 Oct 2002 11:23:34 +0200
From:      <Danny.Carroll@mail.ing.nl>
To:        <fgleiser@cactus.fi.uba.ar>, <slay@slough-feg.com>
Cc:        <questions@freebsd.org>
Subject:   RE: Dummynet & ports
Message-ID:  <C6304883FB11E347AD4958D3F14EC00AE892E5@ing.com>

next in thread | raw e-mail | index | archive | help
Ummm  Instead of having a new machine, you *can* setup a jail =
environment specifically for ftp, divert(with nat) everything ftp'ish to =
the jail's ip address and just bandwidth limit the jail.

-D

-----Original Message-----
From: Fernando Gleiser [mailto:fgleiser@cactus.fi.uba.ar]
Sent: 04 October 2002 21:46
To: greg
Cc: questions@freebsd.org
Subject: Re: Dummynet & ports


On Fri, 4 Oct 2002, greg wrote:

> So if i did something like use wu-ftpd and use the "passive ports"
> directive in
> /etc/ftpaccess then i would be able to control the passive ports used
> and then pipe them with dummynet?

Yes. And no :). By doing that you can limit the bandwidth used by people
who access *your* ftp, but you can't control which ephemeral port will
bew chosen by a *remote* ftpd (ie, ftp.freebsd.org) because that is
daemon/OS dependant.

The best solution I've found is to install a dedicated proxy server for
FTP/HTTP and then limit the traffic for that proxy server. But you need
an extra machine for that.


			Fer

>
> Does this sound right?
>
> Thanks in advance
>
> greg
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
-----------------------------------------------------------------=0A=
ATTENTION:=0A=
The information in this electronic mail message is private and=0A=
confidential, and only intended for the addressee. Should you=0A=
receive this message by mistake, you are hereby notified that=0A=
any disclosure, reproduction, distribution or use of this=0A=
message is strictly prohibited. Please inform the sender by=0A=
reply transmission and delete the message without copying or=0A=
opening it.=0A=
=0A=
Messages and attachments are scanned for all viruses known.=0A=
If this message contains password-protected attachments, the=0A=
files have NOT been scanned for viruses by the ING mail domain.=0A=
Always scan attachments before opening them.=0A=
-----------------------------------------------------------------

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?C6304883FB11E347AD4958D3F14EC00AE892E5>