Hi Jon, You can use iptables to mark/change the DSCP value of an incoming packet on the ingress side. An example is below (where $in_dev can be whatever your input interface is): ip tables -t mangle -A FORWARD -i $in_dev -p tcp --ports 80 -j DSCP --set-dscp-class BE Basically the above example (re)marks all www traffic (meant to be forwarded through this node) entering via $in_dev to BE. There is a decent (IMO) manpage for iptables (there are too many permutations/combinations of options to list here). > -----Original Message----- > From: lartc-bounces@xxxxxxxxxxxxxxx [mailto:lartc-bounces@xxxxxxxxxxxxxxx] > On Behalf Of Flechsenhaar, Jon J > Sent: Monday, August 06, 2007 7:08 PM > To: LARTC@xxxxxxxxxxxxxxx > Subject: Marking and remarking of incoming traffic > > I can use DSMARK to mark on the Egress side. Is there a way to > mark/change the DSCP value of an incoming packet on the ingress side? > Thanks. > > > Jon Flechsenhaar > Boeing WNW Team > Network Services > (714)-762-1231 > 202-E7 > > _______________________________________________ > LARTC mailing list > LARTC@xxxxxxxxxxxxxxx > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc _______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc