Hi,
the Advanced routing HOWTO says: "Configuration is achieved using 'tc
filter police' commands." in section 14.4. However in section 15.2
"Protecting your host from SYN floods" the sample script calls tc
filter add. I get the following error when using the sample
script:/sbin/tc filter add dev eth0 parent ffff: protocol ip prio 50
handle 1 fw police rate 1kbit burst 40 mtu 9k drop flowid :1
RTNETLINK answers: Invalid argument
Here are my kernel settings:
CONFIG_NETFILTER=y
CONFIG_NETLINK_DEV=m
CONFIG_IP_NF_MATCH_MARK=m
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_TARGET_MARK=m
CONFIG_NET_SCHED=y
CONFIG_NET_SCH_CBQ=m
CONFIG_NET_SCH_CSZ=m
CONFIG_NET_SCH_SFQ=m
CONFIG_NET_SCH_TBF=m
CONFIG_NET_SCH_INGRESS=m
CONFIG_NET_QOS=y
CONFIG_NET_ESTIMATOR=y
Can someone shed a light why the sample script won't work please ?
It'd be greatly appreciated.
Cheers,
Darko
