Ah. Now I understand. Allow me to ease your confusion.
You cannot rate-limit inbound packets, directly. IP doesn't work that way. You can only rate limit on outbound packets. But, when you have a router with two interfaces, you can rate-limit them indirectly. In your case, just set up your queues for the packets leaving the router for the workstations that live on $int_if.
|