On Fri, 2 Feb 2001, Pavarani Giovanna wrote: > Talking about DSCP field... > > iptables is said to provide all the features of ipchains and something more and > better organized, but with ipchains I was able to set all the DSCP values > in the TOS field, with iptables it seems this is no more possible, only few > values are permitted. > > For example: > > > iptables -t mangle -A PREROUTING -s 10.0.0.2 -j TOS --set-tos 0xb8 > > gives me: > > iptables v1.1.2:Bad TOS value '0xb8' > > Am I doing something wrong? Yes. You need to specify two values, one and-mask and one or-mask, IIRC. The new value will be the old value anded with your and-mask and then or-ed with your or-mask. Doei, Arthur. -- /\ / | arthurvl@xxxxxxxxxx | Work like you don't need the money /__\ / | A friend is someone with whom | Love like you have never been hurt / \/__ | you can dare to be yourself | Dance like there's nobody watching