[nzlug] IPCop & better traffic shaping

[Nick Rout]

On Sat, Jul 12, 2008 at 8:56 PM, Howard <howard-nzlug at fox.co.nz> wrote:
> Howard said on 08/07/08 23:38:
>>
>> Hi all
>>
>> I have IPCop as my firewall, but the QoS tools by default are a little
>> lacking.
>>
>> I've now gone to Worldexchange's Voip offering (VFX) and need to improve
>> the traffic shaping to get quality calls.
>>
>> Anyone played with advanced traffic shaping on IPCop with either
>> 'plugins' or manual tweaks?  I'm getting a bit out of my depth and the
>> VFX is starting to have a low WAF...
>>
>> I have found references here:
>> http://en.wikibooks.org/wiki/Advanced_QoS_for_IPCop
>> which suggests using this, and a new kernel (also referenced)
>> http://mh-lantech.css-hamburg.de/ipcop/download.php?view.176
>> The install does not seem to be very current, before I bring my firewall
>> down for a while - is anyone using this (QOS_NG) on the latest IPCop
>> version?
>
> Followup to my post and subsequent questions...
>
> I have given up on the QOS_NG kernel/script addon for IPCop, I can't get my
> Pulsar modem online after the kernel change.  Errors in the kernel logs.
>  Possibly could recompile the drivers for the kernel but getting out of my
> depth....  Others seem to have it working, with IPCop 1.4.18, but they
> likely have something else as the internet interface.
>
> I have updated the traffic shaping script to prioritise about 300 UDP ports
> and am seeing how that goes.  Otherwise I'll be going back to analogue for
> the time being.  I think there needs to be more smarts in the kernel, and
> IPCop is pretty cut down.
>
> FYI I am on fullspeed adsl, up and down so there should be plenty of
> bandwidth.
>
> Am also looking at the Clarkconnect distro to see if it can support the
> Pulsar out of the box (or with minimal effort).  A little bit bloaty as a
> firewall, but may do.

IMHO Clark is bollocks, buts its a while since I looked.

pfsense (freebsd based) is meant to be very good, but whether it
supports the pulsar modem is unknown to me.