As the topic states, I find my self needing better routing rules.  I can't 
use any rule inside of the tc command, because they deal only with the 
packet data, and the application level has already been abstracted from 
the data.

So, the solution outlined in the Adv Routing howto is to 'mark' the packet 
with --set-mark of iptables.  Unfortunately, I find that I am unable to 
filter in the PREROUTING chain with the --uid-owner filter.

Actually, since I'm here, is there any way to filter by the 'executable' 
that's generating the data?  It would be nice if I could mark all packets 
generated by given applications.  EX, proftpd, apache, other daemons...

Since I should already be filtering by user ID, I could also filter by the 
application running, which would give me better routing and QOS.

Reply via email to