From: Daniel Sercaianu <sdan@terranet.ro>
To: lartc@vger.kernel.org
Subject: [LARTC] NAT & IMQ
Date: Sat, 10 Aug 2002 17:11:32 +0000 [thread overview]
Message-ID: <marc-lartc-102899956121469@msgid-missing> (raw)
I have the following problems:
I cannot shape the ip xxx.xxx.xxx.xxx when I do SNAT or MASQUERADE with
them. Otherwise when I remove these two iptables lines the shaping works
perfectly.
It is very important for me to shape the xxx.xxx.xxx.xxx ip and not the
yyy.yyy.yyy.yyy. When I tried to shape yyy.yyy.yyy.yyy, it worked.
What rules should be added to make this possible?
My iptables rules are:
iptables -A PREROUTING -t mangle -s xxx.xxx.xxx.xxx -j MARK --set-mark 1
iptables -A POSTROUTING -t nat -s xxx.xxx.xxx.xxx -j SNAT --to zzz.zzz.zzz.zzz -o eth4
iptables -t mangle -I PREROUTING -j IMQ
ip link set imq0 up
ip rule shows the following output:
32764: from zzz.zzz.zzz.0/24 lookup ew
32765: from all fwmark 1 lookup ew
32766: from all lookup main
32767: from all lookup default
My tc + htb rule look like this:
/sbin/tc qdisc add dev imq0 root handle 1: htb default 200 r2q 3
/sbin/tc class add dev imq0 parent 1:0 classid 1:1 htb rate 100Mbit ceil 100Mbit burst 2k prio 5
/sbin/tc filter add dev imq0 parent 1:0 protocol ip prio 5 handle 1: u32 divisor 256
/sbin/tc class add dev imq0 parent 1:1 classid 1:2 htb rate 512kbit ceil 512kbit burst 2k prio 5
/sbin/tc qdisc add dev imq0 parent 1:2 handle 10: sfq quantum 1514b perturb 10
/sbin/tc filter add dev imq0 parent 1:0 protocol ip prio 5 u32 match ip dst xxx.xxx.xxx.xxx flowid 1:2
/sbin/tc filter add dev imq0 parent 1:0 prio 5 handle ::1 u32 ht 800:: \
match ip nofrag \
offset mask 0x0F00 shift 6 \
hashkey mask 0x00ff0000 at 8 link 1:
Daniel Sercaianu
Terranet Virtual Media
sdan@terranet.ro
GSM +40 788 837723
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
next reply other threads:[~2002-08-10 17:11 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-08-10 17:11 Daniel Sercaianu [this message]
2002-08-11 13:39 ` [LARTC] NAT & IMQ Patrick McHardy
2002-08-11 13:44 ` Patrick McHardy
2002-08-11 14:53 ` Daniel Sercaianu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-102899956121469@msgid-missing \
--to=sdan@terranet.ro \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.