Throttling rather than blocking

[Particle]

I have just come across untangle and I have been reading through the documentation and am very impressed.

I am particularly interested in untangle's protocol control, but rather than blocking certain protocol's I would like to be able to throttle them -- m0n0wall, for example, has this capability.

Unfortunately, everything that I have read suggests that this this is not possible with untangle. Could some one please confirm this for me?

Actually, I would probably be happy if I could throttle certain mac addresses, but again it seems to be easy to block certain addresses but not limit their bandwidth...

Apologies for asking what is arguably a stupid question but I want to make sure that I am not missing something. :confused:

Cheers,
Andrew

[sky-knight]

Welcome

You are correct in your assumption. The protocol control module can only log, pass, or block things.

The QoS in Untangle is also in its infant stages and doesn't tie into any of the modules. It doesn't allow for specific bandwidth controls it just allows for some very basic ques.

[Interflex]

I have a client asking for bandwidth control by user name or mac address, so does anyone have a suggestion of how to do this easily?

[jontz]

Well, you could set up another Linux box and use iptables to ID packets. You could then limit the ones you want from a given IP or MAC address. I guess this solution depends on your definition of easy, since what you want to do isn't all that easily achievable.

[RoSic]

Packeteer Packetshaper does what you want, and a little more.
It's a very cool product that does some amazing things.
It's also very $$.

[RoSic]

I for one, would love to see UT add a true QOS or 'Bandwidth Managment' module to the rack.

[jontz]

I'll 2nd that.

[PROACTIVENS]

Packeteer Packetshaper does what you want, and a little more.
It's a very cool product that does some amazing things.
It's also very $$.

I think that is an understatement. Packetshaper is ultra expensive.

[RoSic]

I think that is an understatement. Packetshaper is ultra expensive.


but also ultra cool. I love that thing. It's very discrete in the data it provides and is incredibly flexible.

[far182]

It's not THAT expensive. You can dabble a small solution for under $4k.

[PROACTIVENS]

Most of the packetshaper solutions I have seen run $10k+. However, I have not looked at it in a long time. Things may have changed.

[jontz]

Even $4k is pretty pricey for something iptables does for free (assuming you don't count your time :D )

[RoSic]

What kind of a box does that get you? Although I suspect for many UTers, $4k is a lot of money (at least it is here).
One thing I don't like about the Packeteer is it's licensing by bandwidth. It makes it truly outrageous to put onto large WAN (13 sites).