All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Michael S. Kazmier" <mkazmier@sofast.net>
To: lartc@vger.kernel.org
Subject: [LARTC] Filter not listed for firewall filter - and not running!
Date: Tue, 27 Jan 2004 00:07:27 +0000	[thread overview]
Message-ID: <538101c3e469$8cbab090$b53afea9@kazvx88> (raw)

Hello all,

I am having some trouble getting a firewall filter to work with TC.   I am
actually setting the mark via EBTables (which is working as far as I can
tell, I am also logging the packet and my syslog reports lots of marks):

ebtables -t broute -A BROUTING -p ipv4 -i eth1 -s 08:00:46:60:B3:57 -j mark
--set-mark 7 --mark-target CONTINUE --log --log-level debug --log-prefix
"EBFW Mark 7"

Now, with the marked packet, I want to rate shape it on ETH0 on its way out.

tc qdisc del dev eth0 root
tc qdisc add dev eth0 root handle 1 cbq bandwidth 100Mbit avpkt 1000 cell 8
tc class change dev eth0 root cbq weight 10Mbit allot 1514
tc class add dev eth0 parent 1: classid 1:2500 cbq bandwidth 100Mbit rate
1512Kbit weight 51Kbit prio 5 allot 1514 cell 8 maxburst 20 avpkt 1000
bounded
tc qdisc add dev eth0 parent 1:2500 handle 2500 sfq perturb 10
tc class add dev eth0 parent 1:2500 classid 1:3500 cbq bandwidth 100Mbit
rate 256Kbit weight 26Kbit prio 5 allot 1514 cell 8 maxburst 20 avpkt 1000
bounded
tc qdisc add dev eth0 parent 1:3500 handle 3500 sfq perturb 10
tc filter add dev eth0 parent 1:2500 protocol ip prio 100 handle 7 fw flowid
1:3500

But the problem is, when I look at stats, my 3500 queue has no traffic and
my filters are blank, I run a " tc filter show dev eth0" and its empty.  I
have various u32 filters on eth1 and they show up.  If add:

tc filter add dev eth0 parent 1:0 protocol ip prio 100 u32 match ip dst
0.0.0.0/0 classid 1:2500

I can now see that I have filters on eth0

[root@cbq]# tc filter show dev eth0
[root@cbq]# tc filter add dev eth0 parent 1:0 protocol ip prio 100 u32 match
ip dst 0.0.0.0/0 classid 1:2500
[root@cbq]# tc filter show dev eth0
filter parent 1: protocol ip pref 100 u32
filter parent 1: protocol ip pref 100 u32 fh 800: ht divisor 1
filter parent 1: protocol ip pref 100 u32 fh 800::800 order 2048 key ht 800
bkt 0 flowid 1:2500
  match 00000000/00000000 at 16
[root@cbq]#


What am I missing here???

Thanks,

Mike

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

                 reply	other threads:[~2004-01-27  0:07 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='538101c3e469$8cbab090$b53afea9@kazvx88' \
    --to=mkazmier@sofast.net \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.