[LARTC] IMQ modification

[LARTC] IMQ modification

[mikee]

Hi,
I wonder if i change imq-patch
+static struct nf_hook_ops imq_egress_ipv4 = {
+	{ NULL, NULL},
+	imq_nf_hook,
+	PF_INET,
+	NF_IP_POST_ROUTING,
+	NF_IP_PRI_LAST
+};

to
+	NF_IP_POST_ROUTING,
+	NF_IP_PRI_MANGLE+1

will this be working correctly?
(I'd like to use imq to shape traffic before SNAT changes source, and after filter rules applies)
Regards
mikee
__________________________
ignore ads below this line


Serwis www.logo.hoga.pl - sci±gaj bajery na telefony
Nokia, Siemens, Alcatel, Ericsson, Motorola,Samsung
------------------------------------------------------------
Promocja!!! rabat 40 % na zakup mks_vir 2003 dla klientów Connect , którzy
posiadaja kupony rabatowe.


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] IMQ modification

[Patrick McHardy]

mikee wrote:

>Hi,
>I wonder if i change imq-patch
>+static struct nf_hook_ops imq_egress_ipv4 = {
>+	{ NULL, NULL},
>+	imq_nf_hook,
>+	PF_INET,
>+	NF_IP_POST_ROUTING,
>+	NF_IP_PRI_LAST
>+};
>
>to
>+	NF_IP_POST_ROUTING,
>+	NF_IP_PRI_MANGLE+1
>
>will this be working correctly?
>(I'd like to use imq to shape traffic before SNAT changes source, and after filter rules applies)
>

then you need to use NF_IP_PRI_FILTER < x < NF_IP_PRI_NAT_SRC,
for example NF_IP_PRI_FILTER + 1 or NF_IP_PRI_NAT_SRC - 1.
look into include/linux/netfilter_ipv4.h for a list of pre-defined values.

Patrick


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[LARTC] IMQ modification

[mikee]

>then you need to use NF_IP_PRI_FILTER < x < NF_IP_PRI_NAT_SRC,
>for example NF_IP_PRI_FILTER + 1 or NF_IP_PRI_NAT_SRC - 1.
>look into include/linux/netfilter_ipv4.h for a list of pre-defined values.
>
>Patrick

thanks for your help, i only wonder if NF_IP_PRI_MANGLE+1 would be
sufficient, since there is no "filter" table/hook (is there?) in postrouting?
(according to http://docum.org/stef.coene/qos/kptd)
i understand difference between suffcient and right/proper, i'm just trying
to understand netfilter architecture :-)

__________________________
ignore ads below this line

Serwis www.logo.hoga.pl - sci±gaj bajery na telefony
Nokia, Siemens, Alcatel, Ericsson, Motorola,Samsung
------------------------------------------------------------
Promocja!!! rabat 40 % na zakup mks_vir 2003 dla klientów Connect , którzy
posiadaja kupony rabatowe.


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/