[LARTC] Re: iptables and DSCP

[Pavarani Giovanna Giovanna.Pavarani@icn.siemens.it]

<PRE>Talking about DSCP field...

iptables is said to provide all the features of ipchains and something more and
better organized, but with ipchains I was able to set all the DSCP values 
in the TOS field, with iptables it seems this is no more possible, only few 
values are permitted.

For example:

&gt;<i> iptables -t mangle -A PREROUTING  -s 10.0.0.2 -j TOS --set-tos 0xb8
</I>
gives me:

iptables v1.1.2:Bad TOS value '0xb8'

Am I doing something wrong?

Thank you
Regards,
Giovanna Pavarani


&gt;<i> 
</I>&gt;<i> On Tue, Jan 23, 2001 at 01:59:00PM +0100, Tom Aernoudt wrote:
</I>&gt;<i> &gt; 
</I>&gt;<i> &gt; Isn't it possible with iptables to filter on DSCP field? 
</I>&gt;<i> 
</I>&gt;<i> Why don't you ask this question on the iptables/netfilter mailinglist?
</I>&gt;<i> 
</I>&gt;<i> Anyway, answer is: No. 
</I>&gt;<i> 
</I>&gt;<i> Not because the framework isn't capable of that. Just because nobody
</I>&gt;<i> implememnted a match yet.
</I>&gt;<i> 
</I>&gt;<i> &gt; Thanks,
</I>&gt;<i> &gt; Tom Aernoudt
</I>&gt;<i> 
</I>

</PRE>