[LARTC] Mark with Iptables

[LARTC] Mark with Iptables

[Kovarththanan Rajaratnam]

Hey

I've been playing with bandwidth sharing and the best solution seems to be a
mix of iptables and CBQ but I seem to be in trouble already. I've choosen to
mark al traffic from my LAN going to the internet (upload) as according to
the following command which seems to work:

iptables -A PREROUTING -t mangle -i eth0 -p tcp -d ! 192.168.0.0/24 -j
MARK --set-mark 1

But how do I mark the data that's being transferred through the masquaraded
connection (download) established by the computers on the LAN?



_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] Mark with Iptables

[Stef Coene]

Kovarththanan Rajaratnam wrote:
> 
> Hey
> 
> I've been playing with bandwidth sharing and the best solution seems to be a
> mix of iptables and CBQ but I seem to be in trouble already. I've choosen to
> mark al traffic from my LAN going to the internet (upload) as according to
> the following command which seems to work:
> 
> iptables -A PREROUTING -t mangle -i eth0 -p tcp -d ! 192.168.0.0/24 -j
> MARK --set-mark 1
> 
> But how do I mark the data that's being transferred through the masquaraded
> connection (download) established by the computers on the LAN?
You can mark the packets in the forward chain, so they are allready
demasqueraded.  I think that will work, but I didn't tried it.


Stef

-- 

stafke@iname.com        stef.coene@belgacom.net
More QOS info : http://users.belgacom.net/staf/


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [LARTC] Mark with Iptables

[Stef Coene]

Kovarththanan Rajaratnam wrote:
> 
> Hey
> 
> I've been playing with bandwidth sharing and the best solution seems to be a
> mix of iptables and CBQ but I seem to be in trouble already. I've choosen to
> mark al traffic from my LAN going to the internet (upload) as according to
> the following command which seems to work:
> 
> iptables -A PREROUTING -t mangle -i eth0 -p tcp -d ! 192.168.0.0/24 -j
> MARK --set-mark 1
> 
> But how do I mark the data that's being transferred through the masquaraded
> connection (download) established by the computers on the LAN?
You can mark the packets in the forward chain, so they are allready
demasqueraded.  I think that will work, but I didn't tried it.


Stef

-- 

stafke@iname.com        stef.coene@belgacom.net
More QOS info : http://users.belgacom.net/staf/

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/