DSCP support in iptables 1.2.8

DSCP support in iptables 1.2.8

[Isabelle Labbe]

Can anyone confirm that the DSCP target works in iptables 1.2.8 (or
1.2.7a) ?

I am running Red Hat 8.0.  I have upgraded the kernel to 2.4.20.  I have
also installed iptables 1.2.8 and when running the command:

iptables -A FORWARD -t mangle -j DSCP --set-dscp 0x1f

I get the following message:

iptables: No chain/target/match by that name

According to the docs on the netfilter site, the above command should
work. Does anyone know why it doesn't?

thank you

Isabelle

--
Isabelle Labbe
Communications Research Centre Canada
3701 Carling Av.
PO Box 11490, Station H
Ottawa, On
K2H 8S2

email: isabelle.labbe@crc.ca
tel:  (613) 998-1410
fax:  (613) 998-9648

Re: DSCP support in iptables 1.2.8

[Ilguiz Latypov]

On Wed, 16 Apr 2003, Isabelle Labbe wrote:

> Can anyone confirm that the DSCP target works in iptables 1.2.8 (or
> 1.2.7a) ?

Works for me with iptables 1.2.7a from netfilter.org.  I tested the
command you mentioned and it worked.

I am running Debian unstable, but that doesn't matter.  I think the
iptables capabilities depend on

  a) The kernel configuration.  Check out the CONFIG_IP_NF_* options in
     the kernel configuration file and reconfigure/recompile the kernel
     source code if needed.  A quick look at the content of the kernel
     netfilter directory may also help:

     ls /lib/modules/KERNEL_VER/kernel/net/ipv4/netfilter/

     DSCP match kernel module name: ipt_dscp.o
     DSCP target kernel module name: ipt_DSCP.o

  b) The availability of iptables shared object modules.  Check out

     ls /usr/{,local/}lib/iptables/

     DSCP match userspace module name: libipt_dscp.so
     DSCP target userspace module name: libipt_DSCP.so

--
Ilguiz Latypov
Net Integration Technologies, Inc

tel. +1 (514) 281 9191 x 117

RE: DSCP support in iptables 1.2.8

[Rinse Kloek]

How can you use the DSCP target in ip route? Anyone can help me with that?

-----Oorspronkelijk bericht-----
Van: Ilguiz Latypov [mailto:ilguiz@nit.ca]
Verzonden: woensdag 16 april 2003 22:11
Aan: Isabelle Labbe
CC: netfilter@lists.netfilter.org
Onderwerp: Re: DSCP support in iptables 1.2.8



On Wed, 16 Apr 2003, Isabelle Labbe wrote:

> Can anyone confirm that the DSCP target works in iptables 1.2.8 (or
> 1.2.7a) ?

Works for me with iptables 1.2.7a from netfilter.org.  I tested the
command you mentioned and it worked.

I am running Debian unstable, but that doesn't matter.  I think the
iptables capabilities depend on

  a) The kernel configuration.  Check out the CONFIG_IP_NF_* options in
     the kernel configuration file and reconfigure/recompile the kernel
     source code if needed.  A quick look at the content of the kernel
     netfilter directory may also help:

     ls /lib/modules/KERNEL_VER/kernel/net/ipv4/netfilter/

     DSCP match kernel module name: ipt_dscp.o
     DSCP target kernel module name: ipt_DSCP.o

  b) The availability of iptables shared object modules.  Check out

     ls /usr/{,local/}lib/iptables/

     DSCP match userspace module name: libipt_dscp.so
     DSCP target userspace module name: libipt_DSCP.so

--
Ilguiz Latypov
Net Integration Technologies, Inc

tel. +1 (514) 281 9191 x 117