mikee wrote:
Hi, I wonder if i change imq-patch +static struct nf_hook_ops imq_egress_ipv4 = { + { NULL, NULL}, + imq_nf_hook, + PF_INET, + NF_IP_POST_ROUTING, + NF_IP_PRI_LAST +};
to + NF_IP_POST_ROUTING, + NF_IP_PRI_MANGLE+1
will this be working correctly? (I'd like to use imq to shape traffic before SNAT changes source, and after filter rules applies)
then you need to use NF_IP_PRI_FILTER < x < NF_IP_PRI_NAT_SRC, for example NF_IP_PRI_FILTER + 1 or NF_IP_PRI_NAT_SRC - 1. look into include/linux/netfilter_ipv4.h for a list of pre-defined values.
Patrick