Re: Problem with iptables with -j TOS and MARK

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 28-07-2006 15:57, Jarek Poplawski wrote:
On 28-07-2006 14:43, makevuy wrote:
Hy,

I would want to mark the packets that are entering in a machine, with a mark for using diffserv with DSMARK.

My machine has 2 interfaces, a ethernet and a wireless. The ethernet interface is eth1 and the other is wifi0.

Firs, I would want to test that I would be able to mark the tos of the paquets that I would be receiving, for this I write in the console of my linux:


iptables -A PREROUTING -i eth1 -t mangle -p udp -j TOS --set-tos 0x20

But the TOS doesn't change (I see this with ethereal)

Waht could be the problem?

If I can remember, TOS is inserted for real some time later, so try to investigate on forward or postrouting.

After short weekend testing my memory turned out to be faulty again - it can remember only every second bit (because it's old!).

Iptables -j TOS and -j DSCP should change a tos field of ip headers at once (this could be seen with -j LOG everywhere after this setting). This field can influent the way a packet is classified by some qdisc like prio, but not directly - inner priority field is taken for this. And this priority is computed from tos only in forward.

So probably ethereal showed packets before changes or you have some problem with iptables.

Jarek P.

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux