ALTQ problems

[Will Stockwell <bigwill@MIT.EDU>]

I am using these rules to rate limit a honeypot's outgoing traffic so as
not to allow too serious of a DoS from it should it be compromised and
used before we have a chance to cut it off:

interface le0 bandwidth 10M cbq
class cbq le0 honeypot NULL exactbandwidth 30K default
filter le0 honeypot 0 0 <HOST IP ADDR> netmask 0xffffffff 0 0

This is on 3.1.  I get these cryptic kernel messages:

Jul 17 17:25:46 mr-anderson altqd[31189]: cbq: syscall error: can't add
class 'honeypot' on interface 'le0': Invalid argument
Jul 17 17:25:46 mr-anderson altqd[31189]: cbq: syscall error: can't add
class 'ctl_class' on interface 'le0': Invalid argument
Jul 17 17:25:46 mr-anderson altqd[31189]: bad class: add filter failed!:
Invalid argument
Jul 17 17:25:46 mr-anderson altqd[31189]: can't add ctl class filter on
interface 'le0'
Jul 17 17:25:46 mr-anderson altqd[31189]: can't create ctl_class!: Invalid
argument
Jul 17 17:2

I've tried variations on this, all giving me errors.  I can't figure out
what in the world is giving me problems.  Anyone have any ideas?


Will