* marking all h323 packets with some TOS
@ 2003-01-09 8:13 Upma Gandhi
2003-01-09 8:44 ` Raymond Leach
0 siblings, 1 reply; 4+ messages in thread
From: Upma Gandhi @ 2003-01-09 8:13 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 540 bytes --]
Hello All,
I have a following setup
Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24)
lets supopose eth0 is LAN side Interface and
eth1 is WAN side interface.
what I want to do is "Mark all h323 packets with some tos value".
for which my iptables command seems to be like this-
iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m
rtp -j FTOS --set-ftos 0xb8.
but it's giving an error message -
iptable: No chain/target/match by tha rule.
Can anybody help me out.
Thanks & Regards
Upma
[-- Attachment #2: Type: text/html, Size: 759 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread* Re: marking all h323 packets with some TOS
2003-01-09 8:13 marking all h323 packets with some TOS Upma Gandhi
@ 2003-01-09 8:44 ` Raymond Leach
2003-01-09 11:43 ` Upma Gandhi
0 siblings, 1 reply; 4+ messages in thread
From: Raymond Leach @ 2003-01-09 8:44 UTC (permalink / raw)
To: Upma Gandhi; +Cc: Netfilter Mailing List
[-- Attachment #1: Type: text/plain, Size: 1534 bytes --]
Sounds like it doesn't understand the -j FTOS. Maybe a missing module or
not compiled into the kernel?
On Thu, 2003-01-09 at 10:13, Upma Gandhi wrote:
> Hello All,
> I have a following setup
>
> Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24)
>
> lets supopose eth0 is LAN side Interface and
> eth1 is WAN side interface.
>
> what I want to do is "Mark all h323 packets with some tos value".
> for which my iptables command seems to be like this-
> iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m
> rtp -j FTOS --set-ftos 0xb8.
>
> but it's giving an error message -
> iptable: No chain/target/match by tha rule.
>
> Can anybody help me out.
>
> Thanks & Regards
> Upma
>
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
( Raymond Leach )
) Knowledge Factory (
( )
) Tel: +27 11 445 8100 (
( Fax: +27 11 445 8101 )
) (
( http://www.knowledgefactory.co.za/ )
) http://www.saptg.co.za/ (
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
o o
o o
.--. .--.
| o_o| |o_o |
| \_:| |:_/ |
/ / \\ // \ \
( | |) (| | )
/`\_ _/'\ /'\_ _/`\
\___)=(___/ \___)=(___/
[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread* Re: marking all h323 packets with some TOS
2003-01-09 8:44 ` Raymond Leach
@ 2003-01-09 11:43 ` Upma Gandhi
2003-01-09 4:37 ` Ranjeet Shetye
0 siblings, 1 reply; 4+ messages in thread
From: Upma Gandhi @ 2003-01-09 11:43 UTC (permalink / raw)
To: raymondl, netfilter
Hello Raymond,
Thanks for your help.
Modules are not missing and they are compiled also.
But one doubt , in ip_conntarck_in function of ip_conntrack_core.c file.
When it lokks for ct-helper, it's address is 0, means that helper are
not register.
But I've compiled h323& rtc helper, as I'm very new to
iptables/netfilter, I don't have any idea what does this means ?
Regards
Upma
Raymond Leach wrote:
> Sounds like it doesn't understand the -j FTOS. Maybe a missing module or
> not compiled into the kernel?
>
> On Thu, 2003-01-09 at 10:13, Upma Gandhi wrote:
> > Hello All,
> > I have a following setup
> >
> > Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24)
> >
> > lets supopose eth0 is LAN side Interface and
> > eth1 is WAN side interface.
> >
> > what I want to do is "Mark all h323 packets with some tos value".
> > for which my iptables command seems to be like this-
> > iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m
> > rtp -j FTOS --set-ftos 0xb8.
> >
> > but it's giving an error message -
> > iptable: No chain/target/match by tha rule.
> >
> > Can anybody help me out.
> >
> > Thanks & Regards
> > Upma
> >
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> ( Raymond Leach )
> ) Knowledge Factory (
> ( )
> ) Tel: +27 11 445 8100 (
> ( Fax: +27 11 445 8101 )
> ) (
> ( http://www.knowledgefactory.co.za/ )
> ) http://www.saptg.co.za/ (
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> o o
> o o
> .--. .--.
> | o_o| |o_o |
> | \_:| |:_/ |
> / / \\ // \ \
> ( | |) (| | )
> /`\_ _/'\ /'\_ _/`\
> \___)=(___/ \___)=(___/
>
> ------------------------------------------------------------------------
> Name: signature.asc
> signature.asc Type: application/pgp-signature
> Description: This is a digitally signed message part
^ permalink raw reply [flat|nested] 4+ messages in thread* Re: marking all h323 packets with some TOS
2003-01-09 11:43 ` Upma Gandhi
@ 2003-01-09 4:37 ` Ranjeet Shetye
0 siblings, 0 replies; 4+ messages in thread
From: Ranjeet Shetye @ 2003-01-09 4:37 UTC (permalink / raw)
To: netfilter
Are the modules loaded into the kernel ? run an lsmod and make sure that
the modules are loaded.
Otherwise you will need to use insmod or modprobe to load the modules
into the kernel
you might want to do this in some startup script so that the modules are
loaded on bootup.
Ranjeet Shetye.
On Thu, 2003-01-09 at 12:43, Upma Gandhi wrote:
> Hello Raymond,
> Thanks for your help.
> Modules are not missing and they are compiled also.
> But one doubt , in ip_conntarck_in function of ip_conntrack_core.c file.
> When it lokks for ct-helper, it's address is 0, means that helper are
> not register.
> But I've compiled h323& rtc helper, as I'm very new to
> iptables/netfilter, I don't have any idea what does this means ?
>
> Regards
> Upma
>
> Raymond Leach wrote:
>
> > Sounds like it doesn't understand the -j FTOS. Maybe a missing module or
> > not compiled into the kernel?
> >
> > On Thu, 2003-01-09 at 10:13, Upma Gandhi wrote:
> > > Hello All,
> > > I have a following setup
> > >
> > > Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24)
> > >
> > > lets supopose eth0 is LAN side Interface and
> > > eth1 is WAN side interface.
> > >
> > > what I want to do is "Mark all h323 packets with some tos value".
> > > for which my iptables command seems to be like this-
> > > iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m
> > > rtp -j FTOS --set-ftos 0xb8.
> > >
> > > but it's giving an error message -
> > > iptable: No chain/target/match by tha rule.
> > >
> > > Can anybody help me out.
> > >
> > > Thanks & Regards
> > > Upma
> > >
> > --
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > ( Raymond Leach )
> > ) Knowledge Factory (
> > ( )
> > ) Tel: +27 11 445 8100 (
> > ( Fax: +27 11 445 8101 )
> > ) (
> > ( http://www.knowledgefactory.co.za/ )
> > ) http://www.saptg.co.za/ (
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > o o
> > o o
> > .--. .--.
> > | o_o| |o_o |
> > | \_:| |:_/ |
> > / / \\ // \ \
> > ( | |) (| | )
> > /`\_ _/'\ /'\_ _/`\
> > \___)=(___/ \___)=(___/
> >
> > ------------------------------------------------------------------------
> > Name: signature.asc
> > signature.asc Type: application/pgp-signature
> > Description: This is a digitally signed message part
>
>
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2003-01-09 11:43 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-01-09 8:13 marking all h323 packets with some TOS Upma Gandhi
2003-01-09 8:44 ` Raymond Leach
2003-01-09 11:43 ` Upma Gandhi
2003-01-09 4:37 ` Ranjeet Shetye
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.