Limiters
-
thanks Ill try that.
Now I have some doubts.. If I limit a host on my LAN, I need to consider the bandwidth of my WAN? or which bandwidth?
This could be the scenario:
I have 3 MB bandwidth in my WAN connection, and I want to limit a host to use only 100k of that 3Mb, for upload and download.
Should I limit on the WAN interface or LAN interface?thanks for your help!!
-
I would limit lan, if you have no bridged interfaces
-
I haven't fully tested pfSense 2.0, but in my knowledge, by limiting LAN you are controlling the data flux the user from LAN do to WAN since the connections between LAN users are made by the switch it self. At my place i have applied the limiters to LAN and it's working fine to limit the internet access to the WAN by LAN users.
-
thanks..
But…what if I create a rule on my LAN for Upload with source ip(host) and another rule on my WAN for Download with destination ip (host).?
That might work better?"You can make a WAN rule with a destination of the LAN IP involved (NAT happens before the rules are processed) or you could put a rule on the floating tab, on lan, in the 'out' direction."
http://forum.pfsense.org/index.php?topic=34311.0 -
But…what if I create a rule on my LAN for Upload with source ip(host) and another rule on my WAN for Download with destination ip (host).?
That might work better?How many clients you want to limit? only one or all of 'em?
-
some of them.. between 5 and 10 hosts..
I think if it works fine with 1 host it`d work with "N" hosts?thanks for your help again!
-
You can create alias, fill that with limitable ip's and put that alias in your limiter rules
-
yes I know that, but my "main" doubt is in which interface do I have to put my rules…upload on LAN and Download on WAN? or both in LAN?
thanks!
-
rules work always on ingress.
upload -> lan
download -> wanYou can also test how those work, if you put both rules on lan and none to wan
-
ok
I will test both on LAN, many forum users says that this works, but I still believe that it'd be better: upload on LAN and Download on WAN..thanks
after my test I will post again the results I get