i can see problem in 2.6.22.18 ,but not in 2.6.26.8 ..... Is there
any patch available ??//
On Thu, Aug 20, 2009 at 8:58 PM, ratheesh k<ratheesh.ksz@xxxxxxxxx> wrote:
> in linux kernel , in net/sched/cls_fw.c file , fw_classify is
> called every time tc filter is hit .
> skb->mark is zero when u use rules like
>
> > iptables -t mangle -A PREROTUING -p icmp -i br0 -j MARK --set-mark 2
>> iptables -t mangle -A PREROTUING -p icmp -s 192.168.1.0/24 -d !
>> 192.168.1.0/24 -j MARK --set-mark 2
>> iptables -t mangle -A FORWARD -p icmp -i br0 -o eth1 -j MARK --set-mark 2
>
> But if u use
>>iptables -t mangle -A PREROTUING -p icmp -j MARK --set-mark 2
>
> the skb->mark is 2 , correct value .
>
> This problem happens only with bridge . when i tried with one of the
> interface it works perfectly .
>
> Thanks,
> Ratheesh
>
>
>
>
> On Wed, Aug 19, 2009 at 5:44 PM, ratheesh k<ratheesh.ksz@xxxxxxxxx> wrote:
>> I have two interfaces , eth0 and ap0 bridged together to form br0 .
>> And another interfaces eth1 on wan side .
>>
>>
>> br0 <------------------------> eth1
>> ( eth0 , ap0)
>> { lan } {wan}
>>
>> packets from lan side are nated to eth1 . i have qos rules on both
>> br0 and eth1 . when i googled i found that "mangling packets on br0
>> and using fw filters wont work on linux bridge ".. Is this true ?? Can
>> you tell me why ??
>>
>> But the funny thing is i colored packets in prerouting chain only
>> specifying protocol ( not specifying interface )
>>
>> iptables -t mangle -A PREROTUING -p icmp -j MARK --set-mark 2 and
>> i have filter rule to put packets tat are fw marked as 2 to put into
>> some flow . This works fine , when i send an icmp packet from lan to
>> wan side !!!!!!! ??????????
>>
>> But if try any of below rules intsead of above , it wont work
>>
>> iptables -t mangle -A PREROTUING -p icmp -i br0 -j MARK --set-mark 2
>> iptables -t mangle -A PREROTUING -p icmp -s 192.168.1.0/24 -d !
>> 192.168.1.0/24 -j MARK --set-mark 2
>> iptables -t mangle -A FORWARD -p icmp -i br0 -o eth1 -j MARK --set-mark 2
>>
>> i dont know y ????????
>>
>> I should go for ebtables to mark packets ???????? then it will work ???
>>
>
_______________________________________________
Bridge mailing list
Bridge@xxxxxxxxxxxxxxxxxxxxxxxxxx
https://lists.linux-foundation.org/mailman/listinfo/bridge
