there seems to be hardcoded maximum limit 10000 packets/sec in iptables

[svn/Prometheus-QoS/.git] / parsehosts.c

diff --git a/parsehosts.c b/parsehosts.c
index ac9b39fd47c374f23c965bb159f3223c2648258c..9ae1d811f827bf9971e642a8015fffef70b256da 100644 (file)
--- a/parsehosts.c
+++ b/parsehosts.c
@@ -40,6 +40,7 @@ void TheIP(char *ipaddr, int is_network)
  ip->direct      = \\r
  ip->traffic     = \\r
  ip->pktsup      = \\r
+ ip->pps_limit   = \\r
  ip->pktsdown    = 0;\r
  ip->keyword     = keywords;\r
  ip->v6          = (strchr(ip->addr,':')!=NULL);\r
@@ -252,13 +253,20 @@ void parse_hosts(char *hosts)
      else \r
      {\r
       ip->max -= ip->keyword->reserve_max;\r
-      if(ip->max<ip->min)\r
+      if(ip->max < ip->min)\r
       {\r
-       ip->max=ip->min;\r
+       ip->max = ip->min;\r
       }\r
      }\r
 \r
-     ip->mark = FIRSTIPCLASS+1+class_count++;\r
+     /* MTU is 1450 bytes = 11600 bits ~= 12 kbit, max is in kb/s */\r
+     ip->pps_limit = ip->max/12;\r
+     if(ip->pps_limit > 10000) /* this limit seems to be hardcoded in iptables */\r
+     {\r
+      ip->pps_limit = 0; /* do not apply packet limits */\r
+     }\r
+\r
+     ip->mark = FIRSTIPCLASS+1+class_count++;     \r
      update_network(ip->addr, ip);\r
 \r
      if_exists(group,groups,(group->min == ip->min)) \r