Re: iptables breakage WAS(Re: dummy as IMQ replacement

[Andy Furniss <andy.furniss@dsl.pipex.com>]

jamal wrote:
> Ok, Andy - I have tested this and should all work.
> Can you double check on your side before i push kernel patch to Dave? I
> tested on ubuntu distro on an AMD athlon.
> Attached tar.gz with necessary patches. I only bothered to do 2 out of 3
> tests. The second one covers the third. iptables libraries at runtime:
> 1.3.1

OK rebuilt with those versions and patches.

> TEST1:
> 
> Check if ipt works on its own and stats are fixed.
> 
> tc qdisc del dev eth0 ingress
> tc qdisc add dev eth0 ingress
> 
> tc filter add dev eth0 parent ffff: protocol ip prio 6 u32 \
> match ip src 10.0.2.24/32 flowid 1:16 \
> action ipt -j TOS --set-tos Maximize-Reliability

Yes this works OK

> TEST2:
> - check if ipt followed by another action works.
> - check if mirred works
> 
> tc qdisc del dev eth0 ingress
> tc qdisc add dev eth0 ingress
> 
> tc filter add dev eth0 parent ffff: protocol ip prio 6 \
> u32 match ip src 10.0.2.24/32 flowid 1:16 \
> action ipt -j TOS --set-tos Maximize-Reliability \
> action mirred egress redirect dev lo

Also works OK

> bantu:~# tc -s filter ls dev eth0 parent ffff:

didn't get bash prompt back after doing this till <ctrl><c> but works 
and looks OK. Works if I direct to dummy0 aswell :-)

The thing that still fails is trying to use MARK - but I guess that's 
not to do with mirred as I don't get any mention of it anymore.

[root@amd /home/andy/Qos]# tc qdisc del dev eth0 ingress
RTNETLINK answers: No such file or directory
[root@amd /home/andy/Qos]# tc qdisc add dev eth0 ingress
[root@amd /home/andy/Qos]# tc filter add dev eth0 parent ffff: protocol 
ip prio 6 \
 > u32 match ip src 10.0.2.24/32 flowid 1:16 \
 > action ipt -j MARK --set-mark 1
tablename: mangle hook: NF_IP_PRE_ROUTING
         target: MARK set 0x1  index 0
RTNETLINK answers: Invalid argument
We have an error talking to the kernel

I get exactly the same error if I also add action mirred egress redirect 
dev lo - before I would get different.

Andy.