Re: NAT+mangle+tc

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 12 Oct 2004 07:04:17 +1000
Alexander Samad <alex@xxxxxxxxxxxx> wrote:

> you can do something like
> 
> iptables -t mangle -A PREROUTING -s AddrIWantToShape -j mark 0x02
> iptables -t mangle -A PREROUTING -s AddrIWantToShape2 -j mark 0x03

-- SNIP --
> 
> tc filter add dev InternetInt parent 1: protocol ip pref 5 handle 2 fw flowid 1:30
> tc filter add dev InternetInt parent 1: protocol ip pref 5 handle 3 fw flowid 1:40
> 

Hi All.

I am also fighting this for some time now. And I got:

(icmp incoming thru eth1 should be put into output eth2 flow 1:1)
iptables -t mangle -A PREROUTING -i eth1 -p icmp -j MARK --set-mark 1
tc filter add dev eth2 protocol ip parent 1: pref 1 handle 1 fw flowid 1:1

RTNETLINK answers: Invalid argument

Linux Slackware  8.1
iptables v1.2.6a
Kernel 2.4.20-pre10 with
<*>  Firewall based classifier
tc downloaded from docum.org 

The funny thing is that the line bellow do not give me any errors:

tc filter add dev $INTERNET protocol ip \
        parent 1:0 prio 1 u32 \
        match ip src X.Y.W.Z/29 \
        flowid 1:FFFE


It is another classifier I know. But what am I doing wrong?

-- 

Ethy H. Brito         /"\
InterNexo Ltda.       \ /  CAMPANHA DA FITA ASCII - CONTRA MAIL HTML
+55 (12) 3941-6860     X   ASCII RIBBON CAMPAIGN - AGAINST HTML MAIL
S.J.Campos - Brasil   / \ 
_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux