Smoothwall Express (Ver. 2 & 3) support squids download throttling AKA delay_pools. This feature allows you to cap download speeds based upon different criteria, for example on URL or Mime Type. To utilize this feature you must edit the file /var/smoothwall/proxy/acl (Do not edit squid.conf directly because Smoothwall rebuilds it everytime squid is restarted!) The Advanced Proxy mod for Smoothwall has a primitive WebUI for employing delay pools.
ACLs
ACLs or Access Control Lists can be thought of categories or groups. These groups are then used to match against access rules. Group A = Access Group B = Deny You can also invert the groups with a "!" Group !A = Deny (Groups other than A Deny)
There are many types of ACLs such as Source IP, Destination IP, Port, Protocol, Time, and URL just to name a few.
NOTE: ACLs have many options and many uses which are far beyond the scope of this article. For more info on ACLs see the ACL link in the References section.
ACL Example
# LunchTime ACL acl lunchtime time 11:30-1:30
# Video Files ACL acl video req_mime_type -i .avi .mpeg .mpe .mpg .qt .ram .rm .mov .fla .swf
Delay Pools create buckets much like a HTB Quality of Service. This bucket is filled and then refilled at a given interval. Think of it as a glass of beer and when ever the glass is half empty a bartender tops it off, but he pours slowly. Initially the beer is filled up quickly, but after the beer is half gone the flow of beer is controlled.
Example Delay Pool
# Number of Delay Pools delay_pools 1
#First delay class (1) of type (3) delay_class 1 3
# Apply throttling delay_access 1 lunchtime deny # Deny Throttling at lunch time delay_access 1 !lunchtime allow # Allow Throttling any time other than lunch time delay_access 1 allow youtube # Allow Throttling to www.youtube.com delay_access 1 allow video # Allow Throttling of video files delay_access 1 allow audio # Allow Throttling of audio files
Simple answer, it can't be done, Comcast tried to block torrents but failed, 2 many ports to work with and 2 many ways around it.
Smoothwall 3.0 + QoS will be able to throttle it down. It will also eliminate the need for a router that constantly crashes because of high load. This may not be something you want to do, however, you might check in the router for some QoS settings that may be able to help.
I use Smoothwall myself, but to keep torrents running as fast as possible and not slow down web browsing. I would get high pings, in the 800ms range, without. Properly configured, pings drop to 60-80ms, keeping web browsing nice and fast, and the torrents running as best as they can.
OK, found the answer. This is if you wish to block an internet ip range from accessing anything from your IP.
edit /etc/rc.d/rc.firewall.up, and immediately after the line containing: iptables -P OUTPUT ACCEPT add this: iptables -A INPUT -p all -s a.0.0.0/8 -j DROP where a. is the range you want to block like this: iptables -A INPUT -p all -s 65.0.0.0/8 -j DROP