Some take it as a given that people ignore and/or reset the dscp values on inbound access to a given domain. Well, that's largely not the case.
Although the sqm system has long had support for rewriting the dscp field on ingress, and ignoring them in the shaper, it A) didn't work, and B) didn't have gui support. So I've added that to ceropackages and if all goes well, it will be in the next release. It's still a little dicy as to how this interacts with the firewall rules but I'm not in a position to test that. So I've pushed out the new scripts to ceropackages. Secondly, it apparently didn't work right on respecting the ingress dscp values either! so that's fixed also. Something that I don't think is entirely fixed is what happens to the iptables rules when you change one of these parameters and reload sqm. -- Dave Täht NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article _______________________________________________ Cerowrt-devel mailing list [email protected] https://lists.bufferbloat.net/listinfo/cerowrt-devel
