using netfilter with mpls

using netfilter with mpls

[Muhammad R. Sami]

[-- Attachment #1: Type: text/plain, Size: 418 bytes --]

I am a newbee to netfilter. Can I use netfilter along with MPLS to identify packets with special payload and then set EXP bits to certain value in the MPLS header.
regards

------------

Muhammad R. Sami
Research Assistant,
Computer Engineering Department
P.O.Box 354
King Fahd University of Petroleum & Minerals
Dhahran 31261
Saudi Arabia.
Tel: +96638601423
Cell: +96657982951
www.ccse.kfupm.edu.sa/sami

[-- Attachment #2: Type: text/html, Size: 1047 bytes --]

Re: using netfilter with mpls

[Patrick McHardy]

On Wed, 2004-06-09 at 21:41, Muhammad R. Sami wrote:
> I am a newbee to netfilter. Can I use netfilter along with MPLS to
> identify packets with special payload and then set EXP bits to certain
> value in the MPLS header.

There is no MPLS match/target yet, but it should be easy to write one.
But iptables is not the best place because it would only see MPLS-tagged
IP packets.

Regards
Patrick


> regards
>  
> ------------
>  
> Muhammad R. Sami
> Research Assistant,
> Computer Engineering Department
> P.O.Box 354
> King Fahd University of Petroleum & Minerals
> Dhahran 31261
> Saudi Arabia.
> Tel: +96638601423
> Cell: +96657982951
> www.ccse.kfupm.edu.sa/sami

Re: using netfilter with mpls

[Muhammad R. Sami]

[-- Attachment #1: Type: text/plain, Size: 1094 bytes --]

Can you please help me on writing this MPLS match/target and if iptables is not a good solution than where should I focus.

regards
  ----- Original Message ----- 
  From: Patrick McHardy 
  To: Muhammad R. Sami 
  Cc: netfilter-devel@lists.netfilter.org 
  Sent: Sunday, June 13, 2004 11:04 PM
  Subject: Re: using netfilter with mpls


  On Wed, 2004-06-09 at 21:41, Muhammad R. Sami wrote:
  > I am a newbee to netfilter. Can I use netfilter along with MPLS to
  > identify packets with special payload and then set EXP bits to certain
  > value in the MPLS header.

  There is no MPLS match/target yet, but it should be easy to write one.
  But iptables is not the best place because it would only see MPLS-tagged
  IP packets.

  Regards
  Patrick


  > regards
  >  
  > ------------
  >  
  > Muhammad R. Sami
  > Research Assistant,
  > Computer Engineering Department
  > P.O.Box 354
  > King Fahd University of Petroleum & Minerals
  > Dhahran 31261
  > Saudi Arabia.
  > Tel: +96638601423
  > Cell: +96657982951
  > www.ccse.kfupm.edu.sa/sami


[-- Attachment #2: Type: text/html, Size: 2387 bytes --]

Re: using netfilter with mpls

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 724 bytes --]

On Mon, Jun 14, 2004 at 12:14:40PM +0300, Muhammad R. Sami wrote:
> Can you please help me on writing this MPLS match/target and if
> iptables is not a good solution than where should I focus.

First of all, we need to get the new MPLS implementation into the 2.6.x
kernel, then we can start adding support for MPLS packet filtering.

> regards
-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]