* CLASSIFY target in POSTROUTING only?
@ 2005-03-04 11:23 Peter Lenci
2005-03-04 11:30 ` Jonas Berlin
2005-03-04 11:45 ` Patrick McHardy
0 siblings, 2 replies; 3+ messages in thread
From: Peter Lenci @ 2005-03-04 11:23 UTC (permalink / raw)
To: netfilter-devel
Hi all
The CLASSIFY extension can only be used in the POSTROUTING chain of the
mangle table. Is there a technical reason for this or is it just an aid
to prevent misconfiguration? In particular I'd like to use the CLASSIFY
target in the PREROUTING table (in combination with ingress tcp shaping
with the IMQ device).
Regards
Peter
______________________________________________________________________
Post your free ad now! http://personals.yahoo.ca
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: CLASSIFY target in POSTROUTING only?
2005-03-04 11:23 CLASSIFY target in POSTROUTING only? Peter Lenci
@ 2005-03-04 11:30 ` Jonas Berlin
2005-03-04 11:45 ` Patrick McHardy
1 sibling, 0 replies; 3+ messages in thread
From: Jonas Berlin @ 2005-03-04 11:30 UTC (permalink / raw)
To: Peter Lenci; +Cc: netfilter-devel
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Peter Lenci wrote:
| Hi all
Hello there :)
| The CLASSIFY extension can only be used in the POSTROUTING chain of the
| mangle table. Is there a technical reason for this or is it just an aid
| to prevent misconfiguration? In particular I'd like to use the CLASSIFY
| target in the PREROUTING table (in combination with ingress tcp shaping
| with the IMQ device).
If you do the shaping on the IMQ device, I think you can do the shaping
in POSTROUTING, since the ingress shaping is done in the "egress" part
of the IMQ device anyway. You may have to configure the "AA AB BA BB"
IMQ setting in menuconfig for it to work though. If you can't figure it
out, I can try looking into it myself later when I have better time.
- --
- - xkr47
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCKEbFxyF48ZTvn+4RAu0jAJ9x99KPsNdNiJVMsDIE1vQGMsG5jQCeMeTP
mq61NBECGpTwJUo84vTXCc8=
=qSJP
-----END PGP SIGNATURE-----
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: CLASSIFY target in POSTROUTING only?
2005-03-04 11:23 CLASSIFY target in POSTROUTING only? Peter Lenci
2005-03-04 11:30 ` Jonas Berlin
@ 2005-03-04 11:45 ` Patrick McHardy
1 sibling, 0 replies; 3+ messages in thread
From: Patrick McHardy @ 2005-03-04 11:45 UTC (permalink / raw)
To: Peter Lenci; +Cc: netfilter-devel
Peter Lenci wrote:
> Hi all
>
> The CLASSIFY extension can only be used in the POSTROUTING chain of the
> mangle table. Is there a technical reason for this or is it just an aid
> to prevent misconfiguration? In particular I'd like to use the CLASSIFY
> target in the PREROUTING table (in combination with ingress tcp shaping
> with the IMQ device).
The CLASSIFY target is useable in LOCAL_OUT/FORWARD/POST_ROUTING.
PRE_ROUTING is not possible because the value will be overwritten
in ip_forward(). For IMQ you could simply remove that restriction.
Regards
Patrick
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2005-03-04 11:45 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-03-04 11:23 CLASSIFY target in POSTROUTING only? Peter Lenci
2005-03-04 11:30 ` Jonas Berlin
2005-03-04 11:45 ` Patrick McHardy
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.