[b]iptables -t nat -A PREROUTING -p tcp --dport 80 -s IP_HOSTA -j RETURN[/b]
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port $PORT_SQ

192.168.1.15 eth1 dl_low 60kbit dl_ceil 850kbit

<global>
    iface inet eth0 83.15.155.2/29
    iface local eth1 172.20.25.177/24
    do not shape local 83.15.155.2 with 172.20.25.0/24
    do not shape local 172.20.25.177 with 172.20.25.0/24
    #shape router true low 20kbit ceil 500kbit prio 3
    stats unit kbit dump 5c file /var/www/stats/nsstats.txt
    resolve hostname true
    method mark
    reload 1s
</global>

<download>
    link speed 1024kbit shape 896kbit
    user low 50kbit ceil 400kbit strict 80% prio 5
#    interactive rate 0kbit ceil 0kbit
#    interactive srcport 27960,22 dstport 27960,22
#    interactive srcip 213.218.117.66
#    interactive u32 match ip protocol 1 0xff
#    interactive u32 match ip tos 0x10 0xff
    policy dynamic
</download>

<upload>
    link speed 256kbit shape 224kbit
    user low 8kbit ceil 128kbit strict 80% prio 5
#    interactive rate 0kbit ceil 0kbit
#    interactive srcport 22,27960 dstport 22,27960
#    interactive dstip 208.231.90.235
    policy dynamic
</upload>