police incoming traffic

Hello there, I'm trying to police incoming traffic so that downloads are
no faster than 100kbit/s:

# tc qdisc add dev eth0 handle ffff: ingress
# tc filter add dev eth0 parent ffff: protocol ip prio 50 u32 match ip
src 0.0.0.0/0 police rate 100kbit burst 10k drop flowid :1

but after the second command executes, I lose my network connectiviy! No
pings, no name resolution, no downloads, nothing.

I know there exists iprelay.pl, and if I'm not able to get tc to work,
I'm gonna have to use iprelay.

kernel.org 2.6.5, Debian/testing.

TIA