Help on firewall hooks

Help on firewall hooks

[puja]

Hello sir,

I wanted to clarify on some concepts in firewall hooks. I found FW_QUEUE 
as a return type in firewall hook functions in some codes which use 
firewall hooks. I wanted to know the significance of FW_QUEUE. When is 
this used as a return type in firewall hook functions ??

In the tcp/ip code for kernel 2.2.20, in ip_output.c; one of the 
comments says that when call_out_firewall returns FW_QUEUE silently drop 
the skb.
Can you please elaborate on this.


Thanks in advance
Regards
Puja Puri

TBF timing issues

[Gabriel Paues]

Hello!

I use the TBF filter with good results on my computer. When I set a rate
with the filter the traffic get shaped accordingly.

I have set up a couple of UML-instances (user-mode-linux) as a network
to test different QoS strategies. My problem is that the TBF calculates
the wrong rates. An UML-instance may get interrupted just like any other
program. Does the timing code in TBF presume that the kernel wont be 
interrupted, and therefore generates the wrong rates?

Ragards,

Gabriel Paues

Re: TBF timing issues

[jamal]

UML will never work well. The issue is related to the timer effects
in UML. I believe its more of a clock skew and innacuracy than TBF making
assumptions.

cheers,
jamal

On Thu, 8 Aug 2002, Gabriel Paues wrote:

> Hello!
>
> I use the TBF filter with good results on my computer. When I set a rate
> with the filter the traffic get shaped accordingly.
>
> I have set up a couple of UML-instances (user-mode-linux) as a network
> to test different QoS strategies. My problem is that the TBF calculates
> the wrong rates. An UML-instance may get interrupted just like any other
> program. Does the timing code in TBF presume that the kernel wont be
> interrupted, and therefore generates the wrong rates?
>
> Ragards,
>
> Gabriel Paues
>