Hi, Am I correct in assuming that contrary to the example in 15.2 use of ingress that I have to have a tc class ... statement somewhere before the ingress filter actually work? at the moment I only have tc qdisc add ... and tc filter add ... and the filter is not in effect ----- To put it another way, is the Protecting your host from SYN floods example actually correct?! -ck
