On Thu, 14 Mar 2002, Harald Welte wrote: > On Mon, Mar 11, 2002 at 12:37:40PM -0600, Matthew G. Marsh wrote: > > > > Attached is the update for FTOS to Iptables 1.2.5 along with some minor > > patches and the inclusion of the GPL module stuff. > > > > Patch is against the iptables-1.2.5 directory and so includes the > > extensions/.FTOS-test file as well as the changes to the pom/base/ftos.xxx > > parts. > > Thanks, I have applied your patch just before releasing 1.2.6.
Thanks! > However, as you might have noticed, there is now an upcoming DSCP and > ECN target. > > This means, people will now be able to set the DSCP bits without > intefering with ECN. > > I think we should remove the ftos.patch with the next iptables release, > because people will have the following options: I agree. The original FTOS was a cheep hack in order to do testing of various TOS field settings for some other projects. This patch is simply to help out some people who have asked for an update. > 1) use the TOS target for setting all valid TOS values > without interfering with ECN > 2) use the DSCP target for setting all valid DSCP codepoint values > without interfering with ECN > > The FTOS target is potentially harmful to ECN and makes it easy to > violate both old and new usage of the TOS field. I agree strongly! - Just a question - feel free to redirect me to the appropriate author - Will the new DHCP target allow all 6 bits to be set? One of the original reasons that FTOS was created was because TOS did not allow any combination. Thanks again. > Please feel free to tell me if I've missed something. > > > Matthew G. Marsh, President > > -- > Live long and prosper > - Harald Welte / [EMAIL PROTECTED] http://www.gnumonks.org/ > ============================================================================ > GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M+ > V-- PS++ PE-- Y++ PGP++ t+ 5-- !X !R tv-- b+++ !DI !D G+ e* h--- r++ y+(*) -------------------------------------------------- Matthew G. Marsh, President Pakuni Networks 1506 North 59th Street Omaha NE 68104 Phone: (402) 932-7250 Email: [EMAIL PROTECTED] WWW: http://www.pakuni.net --------------------------------------------------
