Luciano Ruete написа:
Or you can use my patch - IPCLASSIFY. Then the rules above would be
substituted by a signle rule per direction:
iptables -t mangle -A FORWARD -s 192.168.1.0/24 -j IPCLASSIFY --addr=src
--and-mask=0xff --or-mask=0x11000
iptables -t mangle -A FORWARD -d 192.168.1.0/24 -j IPCLASSIFY --addr=dst
--and-mask=0xff --or-mask=0x12000
Wow! now i get it, this patch is amazing, now i have a pendient hack that is
to merge this with htb-gen. Any chances that this get into mainline, have you
mailed netfilter-dev list?
:)
Thank you! You should thank Grzegorz Janoszka also - he wrote the
original IPMARK patch. My patch is just a slight modification of it.
As far as I know netfilter team refused to include the IPMARK in the
official P-o-M. So I don't think IPCLASSIFY would be accepted either.
Regards, Vladimir Mirchev.
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc