E
E
Evgeny Ferapontov2014-04-17 14:12:47
Shaping
Evgeny Ferapontov, 2014-04-17 14:12:47

One user eats the entire Internet channel - what to do?

Good afternoon.
We are constantly faced with a problem: one or more "special" users are constantly eating the entire channel of an already dead adsl connection with torrents and other things. (8Mbps receive, 0.7Mbps upload).
We tried Squid, but it was inconvenient and not useful. Raised Debian + Shorewall + bind9, all firewall settings are default, shaper settings are identical to www.ckollars.org/shaping.html -- exactly our case, bind9 looks at OpenDNS and GoogleDNS.
After a minute of work, the sites stop loading. The torrent launched for the test is quietly blown away at full speed from ipv6 addresses this very minute.
What to do? Business suffers losses, hats fly.
PS: Gateway configuration: Core2Duo; 2GB RAM; 2 FE adapters.

Answer the question

In order to leave comments, you need to log in

5 answer(s)
V
Vlad Zhivotnev, 2014-04-17
@inkvizitor68sl

man tc
lartc.org/howto/lartc.ratelimit.single.html

S
Sergey SA, 2014-04-17
@resetsa

so what's the problem?
disable ipv6 on the gateway.
and about a squid - you probably didn't prepare it correctly.

S
Sergey, 2014-04-17
@bk0011m

Shapers you have on what interfaces?
On the inside or on the outside?
Let me explain.
Shapers don't work on external interfaces, at least not on most firewalls.
Cut outgoing traffic on internal

P
Puma Thailand, 2014-04-17
@opium

ban torrents, well, or just turn off the client if he eats the channel, a couple of days without an Internet and the user will change his mind.

D
diablonero92, 2014-04-17
@diablonero92

disable p2p protocol)

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question