Hi, > One of the problems I can see with this is that you give some information > away about the payload, mind you not much, but you are regardless.
That is true - but for me its either give away TOS or have things become unresponsive. > I > guess if you really wanted to do this, one could modify openvpn to look at > the IP headers directly inside of openvpn and get the TOS off of the > packet and then use setsockopt() to set it for the outgoing packet. It > might not seem pretty, but it'll work. Let me know if you want me to hack > up a patch for you to do this. Cheers - Think I've manage to make the changes by getting the TOS field of the incoming packet and setting it on the udp packet - in that it seems to work.
