I'm sorry to bring this subject up again, but I'm just after a definitive answer. Due to my ISP strangling BitTorrent traffic, I have to encrypt it. I did have QoS working with BT before encryption, and I'd like to get it working with encryption. To get it working, I could do one of the following things: 1) Getting the L7 filter to match against encrypted BitTorrent traffic. I'm guessing that my BT client won't be generating encrypted traffic in a consistent form, so even if I could define my own protocol matching filter, it wouldn't work. 2) Bind all my outgoing connections on my machine to a single port, and then applying QoS to that port. But am I correct in thinking that the port ranges you define in HyperWRT only apply to OUTGOING DESTINATION ports, rather than OUTGOING SOURCE ports (which is what I want...) 3) Mark BT packets with TOS flags - only thing here is that I'm unsure what settings I should be using (and I don't know whether the QoS in HyperWRT will do anything with it or not). 4) Define QoS on the machine which does all the BT downloads. Not a bad idea, but I don't want to affect all traffic from that machine, so I'm guessing I would then have to explicitly define all other types of traffic to use a higher QoS setting before defining it. I'm hoping that the QoS rules I define are in order, so that HTTP traffic coming from my BT machine will match the HTTP rule first (high priority), without matching the MAC address rule (low priority). Is that the case? 5) Put another network card in my BT machine, and route only BT traffic through it (all non-BT traffic from that machine then goes through the other network card). Not sure if that's doable or not in Windows 2000, but if I can, then at least I can apply QoS settings by MAC addresses. Can anyone tell me which of these ideas is likely to work? Thanks, dolly_oops.