Eliot, Wireless and Server Administrator, Great Lakes Internet wrote:
> Bridged iptables (ebtables) is not enabled in the kernel and I cannot
> seem to find a variable "bridge-nf-call-iptables" to set with sysctl:
> 
> wireless-r1 linux # sysctl -w bridge-nf-call-iptables=0
> error: "bridge-nf-call-iptables" is an unknown key
> 
> There is also no /proc/sys/net/*/bridge anything. I assume that means
> this is not something I need to worry about?

Not sure yet, the problem would be created by CONFIG_BRIDGE_NETFILTER,
not ebtables itself. Check for
"/proc/sys/net/bridge/bridge-nf-call-iptables".

I'm actually pretty sure that this is indeed what's causing the problem,
bridge netfilter defers calling the IP POST_ROUTING hook until the
packet was already transmitted over the device (and before it goes
out the underlying device), which means when it hits the CLASSIFY
target it already passed through the qdisc.
_______________________________________________
LARTC mailing list
[email protected]
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
  • RE: [LARTC... Eliot, Wireless and Server Administrator, Great Lakes Internet
  • RE: [LARTC... Eliot, Wireless and Server Administrator, Great Lakes Internet
  • RE: [LARTC... Eliot, Wireless and Server Administrator, Great Lakes Internet
  • RE: [LARTC... Eliot, Wireless and Server Administrator, Great Lakes Internet
  • RE: [LARTC... Eliot, Wireless and Server Administrator, Great Lakes Internet
  • RE: [LARTC... Eliot, Wireless and Server Administrator, Great Lakes Internet
  • RE: [LARTC... Eliot, Wireless and Server Administrator, Great Lakes Internet
    • Re: [... Patrick McHardy
  • RE: [LARTC... Eliot, Wireless and Server Administrator, Great Lakes Internet
  • Re: [LARTC... Patrick McHardy

Reply via email to