How to traffic shape with Untangle from a newbie.

[General_Kenobi]

Ok... I totally admit I know nothing about Untagle and I haven't even got my box to work 100% yet. However I did get to test some very effective traffic shaping on my untangle box and it appeared to work.
In a nutshell I nearly didn't (probably like many people) consider Untangle as our new gateway platform because it doesn't have a traffic shaping module. I am not complaining it's got lots of other features that make up for it, but I still can't believe it doesn't have a traffic shaping part... anyways I'm getting side tracked...
So what I did, and you can do is...

Load Mastershaper (www.mastershaper.org) up on a separate Linux box. Mastershaper would have to be one of the best open source apps on the net. Within a very short period via it's easy GUI you can have voip traffic prioritized over your mail and so forth. (There would probably be someway to get it to run straight on the Untangle sever but I'll leave that for someone else.)
So via Mastershaper you've made what you'd like to happen. Your voip to go very fast and your Limewire very slow etc... Here's the cool part. Now in Mastershaper click on Rules, then Show. It will then show you all of the iptables rules complete with full paths it will generate from your decisions you've made. Something like...
sbin/tc qdisc add dev eth2 handle 1: root htb default 1
/sbin/iptables -t mangle -N ms-all
/sbin/iptables -t mangle -N ms-all-chains
/sbin/iptables -t mangle -N ms-prerouting
/sbin/iptables -t mangle -A PREROUTING -j ms-prerouting
/sbin/iptables -t mangle -A ms-prerouting -j CONNMARK --restore-mark
/sbin/iptables -t mangle -A FORWARD -o eth2 -j ms-all
Simply cut and paste these into a file called whateveryoucalledit
Then copy your shaper script (whateveryoucalledit) to your untangle box. (Or paste the lines into a file your editing on the Untagnle box)
Then from the command line, chmod 700 whateveryoucalledit
Then simply, ./whateveryoucalledit
It will then append your shaper rules to the end of your firewall rules. So If its crap traffic the shaper doesn't have to work with it.
Thats it ! Happy traffic shaping and firewall blocking !
Gen Kenobi

[lpopejoy]

Does this work effectively on your Untangle box? I was thinking about trying to install MasterShaper on my untangle box...

Anyone tried that?

[Lee Sharp]

If this works, it is HUGE! Someone move this to Tips and Tricks as well...

[lpopejoy]

No doubt! I switched to PFsense to use traffic shaping... But this would really be sweet.

[dmorris]

I asked around...

It seems there no reason this wouldn't work.
You could even try to run it on the same box (you'll need to move the admin port to something other than where the the untangle admin is)

If you do try it - keep notes - or even write a howto!

Great stuff Kenobi!!