mangle with iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have following rules ... Problem i am facing is tat  filters are not
working ... But funny things if u put magle rules like
iptables -t mangle -A FORWARD  -j MARK --set-mark 3 , it is working
... .  Pks are hitting the rule on both cases ...  wat could be the
problem ??? any clue will be greatly  appreciated ....







#!/bin/bash

####################### Ingress side ########################

iptables -t mangle -A FORWARD -i eth2 -s 10.2.0.0/24 -j MARK --set-mark 3
iptables -t mangle -A FORWARD -i eth2 -s 10.2.0.24 -j MARK --set-mark 1


iptables -t mangle -A FORWARD -i eth2 -s 10.2.0.3 -j MARK --set-mark 2

######################## Egress side ########################

tc qdisc add dev eth1 handle 1:0 root dsmark indices 64 set_tc_index

tc class change dev eth1 classid 1:1 dsmark mask 0x3 value 0xb8
tc class change dev eth1 classid 1:2 dsmark mask 0x3 value 0x28
tc class change dev eth1 classid 1:3 dsmark mask 0x3 value 0x48

tc filter add dev eth1 parent 1:0 protocol ip prio 4 handle 1 fw classid 1:1
tc filter add dev eth1 parent 1:0 protocol ip prio 4 handle 2 fw classid 1:2
tc filter add dev eth1 parent 1:0 protocol ip prio 4 handle 3 fw classid 1:3
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux