how to change the tos

how to change the tos

[Alaios]

Hi i want to apply the patch ftos in order to change
the tos field in ip packets...
The problem is that i don't know how to do that
One guy suggest me the
http://www.paksecured.com/patches/
but the patch is for the 2.4 kernel  but i use the
2.6.10 kernel.
In addition to this i have noticed that the 2.6 kernel
has the following option
CONFIG_IP_NF_MATCH_TOS
I don't know if i need to compile it as module or i
should insert them directly to the kernel...
Afte recompiling the kernel i have run the make
KERNEL_DIR=/usr/src/linux-2.6.10 but still the command

iptables -t mangle -A PREROUTING -i eth0 -p tcp
--dport 22 -j TOS --set-tos 15
iptables v1.2.11: Bad TOS Value
Any suggestion?




		
__________________________________ 
Do you Yahoo!? 
All your favorites on one personal page – Try My Yahoo!
http://my.yahoo.com 

Re: how to change the tos

[George Alexandru Dragoi]

I think you can set only a few values as TOS, 0x0, 0x2, 0x4 and 0x8 .
If you want more, you can use the DSCP target.


On Tue, 8 Feb 2005 04:46:23 -0800 (PST), Alaios <alaios@yahoo.com> wrote:
> Hi i want to apply the patch ftos in order to change
> the tos field in ip packets...
> The problem is that i don't know how to do that
> One guy suggest me the
> http://www.paksecured.com/patches/
> but the patch is for the 2.4 kernel  but i use the
> 2.6.10 kernel.
> In addition to this i have noticed that the 2.6 kernel
> has the following option
> CONFIG_IP_NF_MATCH_TOS
> I don't know if i need to compile it as module or i
> should insert them directly to the kernel...
> Afte recompiling the kernel i have run the make
> KERNEL_DIR=/usr/src/linux-2.6.10 but still the command
> 
> iptables -t mangle -A PREROUTING -i eth0 -p tcp
> --dport 22 -j TOS --set-tos 15
> iptables v1.2.11: Bad TOS Value
> Any suggestion?
> 
> 
> __________________________________
> Do you Yahoo!?
> All your favorites on one personal page – Try My Yahoo!
> http://my.yahoo.com
> 
> 


-- 
Bla bla

Re: how to change the tos

[John A. Sullivan III]

On Tue, 2005-02-08 at 04:46 -0800, Alaios wrote:
> Hi i want to apply the patch ftos in order to change
> the tos field in ip packets...
> The problem is that i don't know how to do that
> One guy suggest me the
> http://www.paksecured.com/patches/
> but the patch is for the 2.4 kernel  but i use the
> 2.6.10 kernel.
> In addition to this i have noticed that the 2.6 kernel
> has the following option
> CONFIG_IP_NF_MATCH_TOS
> I don't know if i need to compile it as module or i
> should insert them directly to the kernel...
> Afte recompiling the kernel i have run the make
> KERNEL_DIR=/usr/src/linux-2.6.10 but still the command
> 
> iptables -t mangle -A PREROUTING -i eth0 -p tcp
> --dport 22 -j TOS --set-tos 15
> iptables v1.2.11: Bad TOS Value
> Any suggestion?
<snip>
I do not believe 15 is a valid value in iptables.  Try
iptables -t mangle -A PREROUTING -i eth0 -p tcp --dport 22 -j TOS -h to
see the valid values - John
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan@opensourcedevel.com

If you would like to participate in the development of an open source
enterprise class network security management system, please visit
http://iscs.sourceforge.net

Re: how to change the tos

[Alaios]

Thx .. .The only reason for me to apply the ftos patch
is because i want to give the tos field whatever value
i want...
Thx again
--- "John A. Sullivan III"
<jsullivan@opensourcedevel.com> wrote:

> On Tue, 2005-02-08 at 04:46 -0800, Alaios wrote:
> > Hi i want to apply the patch ftos in order to
> change
> > the tos field in ip packets...
> > The problem is that i don't know how to do that
> > One guy suggest me the
> > http://www.paksecured.com/patches/
> > but the patch is for the 2.4 kernel  but i use the
> > 2.6.10 kernel.
> > In addition to this i have noticed that the 2.6
> kernel
> > has the following option
> > CONFIG_IP_NF_MATCH_TOS
> > I don't know if i need to compile it as module or
> i
> > should insert them directly to the kernel...
> > Afte recompiling the kernel i have run the make
> > KERNEL_DIR=/usr/src/linux-2.6.10 but still the
> command
> > 
> > iptables -t mangle -A PREROUTING -i eth0 -p tcp
> > --dport 22 -j TOS --set-tos 15
> > iptables v1.2.11: Bad TOS Value
> > Any suggestion?
> <snip>
> I do not believe 15 is a valid value in iptables. 
> Try
> iptables -t mangle -A PREROUTING -i eth0 -p tcp
> --dport 22 -j TOS -h to
> see the valid values - John
> -- 
> John A. Sullivan III
> Open Source Development Corporation
> +1 207-985-7880
> jsullivan@opensourcedevel.com
> 
> If you would like to participate in the development
> of an open source
> enterprise class network security management system,
> please visit
> http://iscs.sourceforge.net
> 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com