Mine

insmod ebtables
insmod ebt_mark
insmod  ebtable_filter

tc qdisc del dev eth0 root 
tc qdisc del dev eth1 root 
ebtables -F FORWARD
iptables -F FORWARD

tc qdisc add dev eth0 root handle 1:0 cbq bandwidth 1Mbit avpkt 1000 mpu 64
tc qdisc add dev eth1 root handle 1:0 cbq bandwidth 1Mbit avpkt 1000 mpu 64


tc class add dev eth0 parent 1:0 classid 1:1 cbq rate 1024KBit allot 1514 prio 1 avpkt 1000 bounded
tc filter add dev eth0 parent 1:0 protocol ip handle 1 fw flowid 1:1

ebtables -A FORWARD -j mark --set-mark 1 --mark-target ACCEPT

iptables -A FORWARD -p TCP --dport 80 --syn -m limit --limit 5/second -j ACCEPT