[LARTC] iptables mangle table PREROUTING rule with -o flag

[LARTC] iptables mangle table PREROUTING rule with -o flag

[John B Dunning/NS/WSC]

This is a multipart message in MIME format.
--=_alternative 003EF54886256EA8_Content-Type: text/plain; charset="US-ASCII"

Greetings all,

I realize from the subject line this makes little sense but here's the 
scenario:

I'm trying to shape (via priority - not bandwidth) peer to peer traffic 
from a number of clients.  Currently I use an IMQ device to bring all 
their outbound (inbound to me - outbound to Inet) traffic together to work 
with policies all at the same time.  I'm testing the IP-P2P modules for IP 
tables and so far they seem to grab the traffic pretty well but here's the 
problem.  I'd like to set the priority for all P2P traffic in one shot - 
thus I have to do it at my IMQ device via a -J CLASSIFY target in 
iptables.  Problem is that the classify target requires that the device 
with the classes be the "-o device" parameter so it knows which device to 
query for the classes - but you can't use -o with the PREROUTING list in 
the mangle table because normally it would make no sense.  Would it be 
possible to modify iptables to allow -o device in the PREROUTING list if 
the device type is IMQ??

Does this make any sense??

John Dunning
Asst Dir Net & Tech Svcs
Wayne State College
--=_alternative 003EF54886256EA8_Content-Type: text/html; charset="US-ASCII"


<br><font size=2 face="sans-serif">Greetings all,</font>
<br>
<br><font size=2 face="sans-serif">I realize from the subject line this
makes little sense but here's the scenario:</font>
<br>
<br><font size=2 face="sans-serif">I'm trying to shape (via priority -
not bandwidth) peer to peer traffic from a number of clients. &nbsp;Currently
I use an IMQ device to bring all their outbound (inbound to me - outbound
to Inet) traffic together to work with policies all at the same time. &nbsp;I'm
testing the IP-P2P modules for IP tables and so far they seem to grab the
traffic pretty well but here's the problem. &nbsp;I'd like to set the priority
for all P2P traffic in one shot - thus I have to do it at my IMQ device
via a -J CLASSIFY target in iptables. &nbsp;Problem is that the classify
target requires that the device with the classes be the &quot;-o device&quot;
parameter so it knows which device to query for the classes - but you can't
use -o with the PREROUTING list in the mangle table because normally it
would make no sense. &nbsp;Would it be possible to modify iptables to allow
-o device in the PREROUTING list if the device type is IMQ??</font>
<br>
<br><font size=2 face="sans-serif">Does this make any sense??</font>
<br>
<br><font size=2 face="sans-serif">John Dunning</font>
<br><font size=2 face="sans-serif">Asst Dir Net &amp; Tech Svcs</font>
<br><font size=2 face="sans-serif">Wayne State College</font>
--=_alternative 003EF54886256EA8_=--
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] iptables mangle table PREROUTING rule with -o flag

[Jason Boxman]

On Thursday 03 June 2004 07:30, John B Dunning/NS/WSC wrote:
> Greetings all,
>
<snip>
> the mangle table because normally it would make no sense.  Would it be
> possible to modify iptables to allow -o device in the PREROUTING list if
> the device type is IMQ??

If it is, you'd have to ask the Netfilter people.

You might have to switch to using -j MARK or, if possible, mark in the 
POSTROUTING chain.  I have been using CLASSIFY in POSTROUTING with success, 
but I don't use IMQ.  I have HTB on my Internet facing interface and shape 
all outbound traffic through it.

> Does this make any sense??
>
> John Dunning
> Asst Dir Net & Tech Svcs
> Wayne State College

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/