Re: Re: Trying to do some very simple ingress limiting, no success

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2006-04-10 at 15:41 +0200, richard lucassen wrote:
> On Mon, 10 Apr 2006 14:38:10 +0200
> Erik Slagter <erik@xxxxxxxxxxxx> wrote:
> 
> > > I didn't know there is a problrm with IMQ + netfilter.
> > 
> > You just told me ;-)
> > 
> > The IMQ handling is done before the netfilter handling...
>  
> That's IFB, not IMQ. IFB is an intermediate functional block that
> appeared in kernel 2.6.16. IFB is a device, IMQ is a iptables target
> (and a device)
> 
> And IMQ is a kernel patch (and iptables has to be patched as well) while
> IFB is in the mainstream kernel.

Sorry for the mix-up.

Anyway, the result is the same.

Cannot use IMQ because patching iproute2 is not feasible, cannot use IFB
because it's at the wrong location in the chain.

And the simple approach I wanted in the first place, now works.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux