From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Furniss Date: Thu, 13 Jan 2005 12:27:54 +0000 Subject: Re: [LARTC] How to balance OUTBOUND traffic by packet if.. Message-Id: <41E6694A.2020203@dsl.pipex.com> List-Id: References: <1483.192.168.1.2.1105403313@maild.mine.nu> <41E5E91C.6050606@dsl.pipex.com> In-Reply-To: <41E5E91C.6050606@dsl.pipex.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Andy Furniss Cc: LARTC@mailman.ds9a.nl, netfilter-devel@lists.netfilter.org, junk@maild.mine.nu Andy Furniss wrote: > junk@maild.mine.nu wrote: > >> I am still looking for a solution to this problem....... >> >>> junk@maild.mine.nu wrote: >>> >>>> Hi, >>>> Yes i did give this a try a couple of times before with no success >>>> >>>> /sbin/iptables -I OUTPUT -m nth --every 2 --packet 1 -t mangle -j MARK >>>> --set-mark 0x2 >>>> /sbin/iptables -I OUTPUT -m nth --every 2 --packet 0 -t mangle -j MARK >>>> --set-mark 0x1 > > > Had a go at this on 2.6.9 / iptables 1.2.11 and it seeems nth is broken. > > I'll try again tomorrow. Seems still broken. I built vanilla(apart from nth) 2.6.10, new iptables 1.2.11 + pom-200400621 with runme extra only said y to nth. I see - Chain OUTPUT (policy ACCEPT 817 packets, 103K bytes) pkts bytes target prot opt in out source destination 15 1260 MARK all -- * eth0 0.0.0.0/0 0.0.0.0/0 every 2th packet #0 MARK set 0x1 15 1260 MARK all -- * eth0 0.0.0.0/0 0.0.0.0/0 every 2th packet #1 MARK set 0x2 Chain POSTROUTING (policy ACCEPT 817 packets, 103K bytes) pkts bytes target prot opt in out source destination 0 0 all -- * eth0 0.0.0.0/0 0.0.0.0/0 MARK match 0x1 15 1260 all -- * eth0 0.0.0.0/0 0.0.0.0/0 MARK match 0x2 [root@amd /home/andy]# cat ./nth-test iptables -t mangle -A OUTPUT -o eth0 -m nth --counter 1 --every 2 --packet 0 -j MARK --set-mark 1 iptables -t mangle -A OUTPUT -o eth0 -m nth --counter 1 --every 2 --packet 1 -j MARK --set-mark 2 iptables -t mangle -A POSTROUTING -o eth0 -m mark --mark 1 iptables -t mangle -A POSTROUTING -o eth0 -m mark --mark 2 Any Ideas anyone? TIA Andy. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Furniss Subject: Re: [LARTC] How to balance OUTBOUND traffic by packet if.. Date: Thu, 13 Jan 2005 12:27:54 +0000 Message-ID: <41E6694A.2020203@dsl.pipex.com> References: <1483.192.168.1.2.1105403313@maild.mine.nu> <41E5E91C.6050606@dsl.pipex.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: LARTC@mailman.ds9a.nl, netfilter-devel@lists.netfilter.org, junk@maild.mine.nu Return-path: To: Andy Furniss In-Reply-To: <41E5E91C.6050606@dsl.pipex.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Andy Furniss wrote: > junk@maild.mine.nu wrote: > >> I am still looking for a solution to this problem....... >> >>> junk@maild.mine.nu wrote: >>> >>>> Hi, >>>> Yes i did give this a try a couple of times before with no success >>>> >>>> /sbin/iptables -I OUTPUT -m nth --every 2 --packet 1 -t mangle -j MARK >>>> --set-mark 0x2 >>>> /sbin/iptables -I OUTPUT -m nth --every 2 --packet 0 -t mangle -j MARK >>>> --set-mark 0x1 > > > Had a go at this on 2.6.9 / iptables 1.2.11 and it seeems nth is broken. > > I'll try again tomorrow. Seems still broken. I built vanilla(apart from nth) 2.6.10, new iptables 1.2.11 + pom-200400621 with runme extra only said y to nth. I see - Chain OUTPUT (policy ACCEPT 817 packets, 103K bytes) pkts bytes target prot opt in out source destination 15 1260 MARK all -- * eth0 0.0.0.0/0 0.0.0.0/0 every 2th packet #0 MARK set 0x1 15 1260 MARK all -- * eth0 0.0.0.0/0 0.0.0.0/0 every 2th packet #1 MARK set 0x2 Chain POSTROUTING (policy ACCEPT 817 packets, 103K bytes) pkts bytes target prot opt in out source destination 0 0 all -- * eth0 0.0.0.0/0 0.0.0.0/0 MARK match 0x1 15 1260 all -- * eth0 0.0.0.0/0 0.0.0.0/0 MARK match 0x2 [root@amd /home/andy]# cat ./nth-test iptables -t mangle -A OUTPUT -o eth0 -m nth --counter 1 --every 2 --packet 0 -j MARK --set-mark 1 iptables -t mangle -A OUTPUT -o eth0 -m nth --counter 1 --every 2 --packet 1 -j MARK --set-mark 2 iptables -t mangle -A POSTROUTING -o eth0 -m mark --mark 1 iptables -t mangle -A POSTROUTING -o eth0 -m mark --mark 2 Any Ideas anyone? TIA Andy.