From mboxrd@z Thu Jan 1 00:00:00 1970 From: "yang,fang" Date: Mon, 24 Sep 2007 11:07:28 +0000 Subject: [LARTC] trouble when using IPMARK module Message-Id: <0JOV0014XDDSON@mail.fudan.edu.cn> MIME-Version: 1 Content-Type: multipart/mixed; boundary="===============0373188169==" List-Id: To: lartc@vger.kernel.org This is a multi-part message in MIME format. --===============0373188169== Content-type: multipart/alternative; boundary="Boundary_(ID_lUyULI28fXyzXvSF5pfCiA)" This is a multi-part message in MIME format. --Boundary_(ID_lUyULI28fXyzXvSF5pfCiA) Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Hello, I am trying to use iptables together with tc I need to use IPMARK module of iptables, but I got a strange error after I run 'iptables -t mangle -A POSTROUTING -o eth0 -j IPMARK --addr=dst --and-mask=0xffff --or-mask=0x1000' The command is copied from iptables manual itself (of course interface changed) I only got " iptables v1.3.5: Unknown arg `--addr=dst' Try `iptables -h' or 'iptables --help' for more information." Environment: CentOS5, iproute2-ss061002, iptables v1.3.5 I have tried several servers and got the same error. Any further ideas? Many thanks. Regards, yfang --Boundary_(ID_lUyULI28fXyzXvSF5pfCiA) Content-type: text/html; charset=US-ASCII Content-transfer-encoding: 7BIT

Hello,

 

I am trying to use iptables together with tc

I need to use IPMARK module of iptables, but I got a strange error after I run ‘iptables -t mangle -A POSTROUTING -o eth0 -j IPMARK --addr=dst --and-mask=0xffff --or-mask=0x1000’

The command is copied from iptables manual itself (of course interface changed)

I only got “ iptables v1.3.5: Unknown arg `--addr=dst'

Try `iptables -h' or 'iptables --help' for more information.”

 

Environment: CentOS5, iproute2-ss061002, iptables v1.3.5

I have tried several servers and got the same error.

 

Any further ideas?

Many thanks.

 

Regards,

yfang

 

--Boundary_(ID_lUyULI28fXyzXvSF5pfCiA)-- --===============0373188169== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc --===============0373188169==-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Peter V. Saveliev" Date: Mon, 24 Sep 2007 12:17:20 +0000 Subject: Re: [LARTC] trouble when using IPMARK module Message-Id: <200709241617.20483.peet@altlinux.org> List-Id: References: <0JOV0014XDDSON@mail.fudan.edu.cn> In-Reply-To: <0JOV0014XDDSON@mail.fudan.edu.cn> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit To: lartc@vger.kernel.org В сообщении от Monday 24 September 2007 15:07:28 yang,fang написал(а): > Hello, > > > > I am trying to use iptables together with tc > > I need to use IPMARK module of iptables, but I got a strange error after I > run 'iptables -t mangle -A POSTROUTING -o eth0 -j IPMARK --addr=dst > --and-mask=0xffff --or-mask=0x1000' > > The command is copied from iptables manual itself (of course interface > changed) > > I only got " iptables v1.3.5: Unknown arg `--addr=dst' > I think, your iptables just does not have IPMARK extension, which was cleaned from pom tree. You can check it with shell command: $ ls -l /lib/iptables/ | grep IPMARK || echo no IPMARK found If you still want to have separate buckets for every destination IP and do not want to build iptables extension by yourself, you can use tc filter with hashing. I have a ip/tc management tool, which can build such solutions with simple configs like that: ! egress htb rate 100Mbit ! class-factory 10.0.0.0/24 rate 64Kbit class-factory 10.0.1.0/24 rate 128Kbit But I wrote no English documentation yet. If there is need for such tool and there will be anyone to proofread very-bad-English docs, I can try to write it. -- Peter V. Saveliev _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mohan Sundaram Date: Mon, 24 Sep 2007 13:44:09 +0000 Subject: Re: [LARTC] trouble when using IPMARK module Message-Id: <46F7BC59.2060708@vsnl.com> List-Id: References: <0JOV0014XDDSON@mail.fudan.edu.cn> In-Reply-To: <0JOV0014XDDSON@mail.fudan.edu.cn> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Peter V. Saveliev wrote: > But I wrote no English documentation yet. If there is need for such tool and > there will be anyone to proofread very-bad-English docs, I can try to write > it. > Please send me the docs and I'll turn it around in a couple of days. Mohan _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc