Hi David, > iptables -t mangle -A OUTPUT -p icmp -j DSCP --set-dscp 10 > iptables -t mangle -A OUTPUT -p icmp -m dscp --dscp 10 -j MARK --set-mark 10
If you add these rules on both sides. Then you also have to specify mark=10 in both configs. You seem to have done so on the gateway but not on the client. Regards, Tobias _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users