Hi Harald, all,
DSCP matching does not work for me in 1.2.6.a (and the daily snapshots
1.2.6a & 1.2.7)
#iptables -v -A OUTPUT -t mangle -p icmp -m dscp --dscp 0x2e
icmp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 DSCP match 0x2e
iptables: No chain/target/match by that name
#strace iptables -v -A OUTPUT -t mangle -p icmp -m dscp --dscp 0x2e
2>&1 | grep setsockopt
setsockopt(3, SOL_IP, 0x40 /* IP_??? */, [1735287149], 932) = -1 ENOSYS
(Function not implemented)
setsockopt(3, SOL_IP, 0x40 /* IP_??? */, [1735287149], 932) = -1 ENOSYS
(Function not implemented)
setsockopt(3, SOL_IP, 0x40 /* IP_??? */, [1735287149], 932) = -1 ENOENT
(No such file or directory)
There's no ipt_dscp.c (only an ipt_DSCP.c) in
/usr/src/linux/net/ipv/netfilter, so I my guess is that only DSCP
mangling is supported at the moment (despite what the the change log
says).
I have code to do DSCP matching but I guess Harald has too?
What's the status of DSCP matching for the upcoming releases. I rely on
DSCP matching in my RSVPd (see signature for URL if interessted) so it
would be great if it got merged.
Oh yes, I have attached a patch for the wrong indentation in
ftos.patch.config.in (dont know if anyone noticed).
Please CC me.
Pim.
--
Pim Van Heuven Ghent University - IMEC
Department of Information Technology (INTEC)
Sint-Pietersnieuwstraat, 41 B-9000, Gent, Belgium
[EMAIL PROTECTED]
DiffServ/MPLS(RSVP-TE) for Linux:
http://dsmpls.atlantis.rug.ac.be
--- patch-o-matic/base/ftos.patch.config.in Wed Apr 3 13:10:48 2002
+++ ../iptables-1.2.7-20020316/patch-o-matic/base/ftos.patch.config.in Thu Mar 14
+14:21:46 2002
@@ -1,2 +1,2 @@
- dep_tristate ' TOS target support' CONFIG_IP_NF_TARGET_TOS $CONFIG_IP_NF_MANGLE
- dep_tristate ' Full TOS target support' CONFIG_IP_NF_TARGET_FTOS
$CONFIG_IP_NF_MANGLE
+ dep_tristate ' TOS target support' CONFIG_IP_NF_TARGET_TOS
+$CONFIG_IP_NF_MANGLE
+ dep_tristate ' Full TOS target support' CONFIG_IP_NF_TARGET_FTOS
+$CONFIG_IP_NF_MANGLE
