RE: Marking and remarking of incoming traffic

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Jon,

You can use iptables to mark/change the DSCP value of an incoming packet on
the ingress side. An example is below (where $in_dev can be whatever your
input interface is):

ip tables -t mangle -A FORWARD -i $in_dev -p tcp --ports 80 -j DSCP
--set-dscp-class BE

Basically the above example (re)marks all www traffic (meant to be forwarded
through this node) entering via $in_dev to BE.

There is a decent (IMO) manpage for iptables (there are too many
permutations/combinations of options to list here). 

> -----Original Message-----
> From: lartc-bounces@xxxxxxxxxxxxxxx [mailto:lartc-bounces@xxxxxxxxxxxxxxx]
> On Behalf Of Flechsenhaar, Jon J
> Sent: Monday, August 06, 2007 7:08 PM
> To: LARTC@xxxxxxxxxxxxxxx
> Subject:  Marking and remarking of incoming traffic
> 
> I can use DSMARK to mark on the Egress side.  Is there a way to
> mark/change the DSCP value of an incoming packet on the ingress side?
> Thanks.
> 
> 
> Jon Flechsenhaar
> Boeing WNW Team
> Network Services
> (714)-762-1231
> 202-E7
> 
> _______________________________________________
> LARTC mailing list
> LARTC@xxxxxxxxxxxxxxx
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux