On 4/10/06, bopolissimus X platypus Jr <[EMAIL PROTECTED]> wrote:
> hi all,
>
> I've got a project that involves marking TCP/IP sessions so that, at the
> TCP/IP level only (no layer 7 classification) it might be possible to
> reply to a request in a special way so that the requester will reply in
> an identifiable way.
>
> ....
>
> Any suggestions or pointers to readings highly appreciated.
>

Haven't tried before but these kernel configs might help.

CONFIG_IP_ROUTE_FWMARK
CONFIG_IP_NF_CONNTRACK_MARK
CONFIG_NF_CONNTRACK_MARK
CONFIG_NETFILTER_XT_TARGET_MARK
CONFIG_NETFILTER_XT_MATCH_MARK
CONFIG_NETFILTER_XT_MATCH_CONNMARK
CONFIG_NETFILTER_XT_MATCH_CONNTRACK
CONFIG_NETFILTER_XT_TARGET_CONNMARK
CONFIG_NET_CLS_FW

Note: this configs are valid in 2.6.16 where some match/target stuff moved
to xtables. Happy reading.

- ed
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph

Reply via email to