On Sat, 25 Feb 2006 16:04:06 +0000
Andy Furniss <andy.furniss@xxxxxxxxxxxxx> wrote:
> > And why doesn't this work? (I send all port 80 to 1.2.3.4 to class
> > 14 /before/ I send the rest to classid 13):
> >
> > $TC filter add dev ${DEV_IFB} parent 1:0 prio 2 protocol ip u32 \
> > match ip protocol 0x6 0xff \
> > match ip dport 80 0xffff \
> > match ip dst 1.2.3.4/32 \
> > classid 1:14
> >
> > $TC filter add dev ${DEV_IFB} parent 1:0 prio 2 protocol ip u32 \
> > match ip protocol 0x6 0xff \
> > match ip dport 80 0xffff \
> > classid 1:13
> >
> > Any ideas?
>
> Looks OK to me - try what Anton suggested to be safe but order is
> usually enough.
ok, thnx.
> I guess IFB means this is ingress - if you are doing nat / or the ip
> you match is on that machine maybe it not passing ifb with the address
> you expect.
Hmm, I don't think so because the ip is the machine itself and it won't
be translated...
R.
--
___________________________________________________________________
It is better to remain silent and be thought a fool, than to speak
aloud and remove all doubt.
+------------------------------------------------------------------+
| Richard Lucassen, Utrecht |
| Public key and email address: |
| http://www.lucassen.org/mail-pubkey.html |
+------------------------------------------------------------------+
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
