>########################## >#Definition of the filters >########################## >tc filter add dev $interface protocol ip parent 1:0 prio 1 u32 match ip src $ip_src match ip dport 20000 0xffff flowid 1:10 >tc filter add dev $interface protocol ip parent 1:0 prio 1 u32 match ip src $ip_src match ip dport 20001 0xffff flowid 1:11 >tc filter add dev $interface protocol ip parent 1:0 prio 1 u32 match ip src $ip_src match ip dport 20002 0xffff flowid 1:12 >tc filter add dev $interface protocol ip parent 1:0 prio 1 u32 match ip src $ip_src match ip dport 20003 0xffff flowid 1:13 >tc filter add dev $interface parent 1:0 protocol ip prio 1 handle 7 fw flowid 1:14 ^^^^^^ The command that creates the FW filter is supposed to fail because it has the same "protocol ip" and "prio 1" as the U32 filter above (which is not allowed). Try changing priority. Regards /Christian [ http://benve.info ] _______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc