I can't find any info on this topic anywhere despite how popular this service is. From only the last few hours of messing around and using last.fm, I have discovered that the stream from last.fm always comes in from the subnets 195.24.232.* and 195.24.233.* (hostnames are s*.last.fm or x*.last.fm where * is a number, it appears between 1 and 25 for s* and between 1 and 8 for x*) on any TCP port ranging from 56000-58000 or so at the moment (I'm going to assume 49152–65535), and port 80 for the destination. I have no idea how to determine if it has an L7 socket (I eliminated mp3 as a valid option though), and there seems to be no practical way to create an ideal QoS setting for last.fm with my limited knowledge. I can create 33 different rules to cover each one of the destination IPs individually and set them in the desired class, but that seems rather tedious. Am I missing something here to create a working QoS setting for last.fm? I am also curious as to why there does not appear to be an option to create a rule with multiple IPs and/or subnets, as when I tried, tomato told me that it was not a valid IP. Any help on this topic would be appreciated and hopefully help others. Thanks.