[PATCH] NOTRACK only untracked

There are modification of NOTRACK netfilter target to avoid creating new connection entries for packets, unrelated to any existing connection. Best way to make new target (clone NOTRACK to NOTRACK-NEW and fix - to mix both), but I have enough motivation to this work ;) PS There are not same

[PATCH] cls_u32 u32_classify()

Currently fine u32 hashkey ... at ... not work with relative offsets. There are simpliest fix to use eat. -- WBR, Denis Kaganovich, [EMAIL PROTECTED] http://mahatma.bspu.unibel.by diff -pruN linux-2.6.orig/net/sched/cls_u32.c linux-2.6/net/sched/cls_u32.c --- linux-2.6.orig/net/sched/cls_u32.c

[PATCH] cls_u32 u32_classify() ++

Currently fine u32 hashkey ... at ... not work with relative offsets. There are simpliest fix to use eat. (sorry, i'm idiot) -- WBR, Denis Kaganovich, [EMAIL PROTECTED] http://mahatma.bspu.unibel.by diff -pruN linux-2.6.orig/net/sched/cls_u32.c linux-2.6/net/sched/cls_u32.c ---

[PATCH] cls_u32 u32_classify() +

Currently fine u32 hashkey ... at ... not work with relative offsets. There are simpliest fix to use eat. (sorry, v2) -- WBR, Denis Kaganovich, [EMAIL PROTECTED] http://mahatma.bspu.unibel.by diff -pruN linux-2.6.orig/net/sched/cls_u32.c linux-2.6/net/sched/cls_u32.c ---

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

Too many pixels to smoke. Sorry. May be so? ;)) (if undefined classid not overwrited by random value tc_classify) Even tc say to classid=0 - --- 1/net/sched/sch_ingress.c 2008-01-12 17:27:05.0 +0200 +++ 2/net/sched/sch_ingress.c 2008-01-22 22:09:32.0 +0200 @@ -136,6

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

*/ +#endif return result; } jamal wrote: On Mon, 2008-14-01 at 20:20 -0200, Dzianis Kahanovich wrote: jamal wrote: [..] Did that make sense? After current #endif - may be. I am afraid that would be counter to expected behavior. Default is meant to apply when no value has been

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

jamal wrote: I in doubts only about action continue. To and/or behaviour one of best usage are (example): I dont think you should be touching the action part at all primarily because actions can set the mark after classification. Yes, I only do it by inertia after #define tc_index mark. I

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

jamal wrote: May be I am mix in mind other code (multi-class loop/walking) and this code. I am deprogramming... ;) Sorry, I just change focus from existing tc_index=... to common behaviour ;) [...] Please refer to what i said above; if what i said still doesnt make sense i can create

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

I in doubts only about action continue. To and/or behaviour one of best usage are (example): # set bit 2 of mark to 0 (mark0xfd|0) and continue tc filter add ... prio 1 ... flowid fd:0 action continue # continue tc filter add ... prio 2 ... - in current ingress_enqueue() code IMHO case

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

Patrick McHardy wrote: --- linux-2.6.23-gentoo-r2/net/sched/sch_ingress.c +++ linux-2.6.23-gentoo-r2.fixed/net/sched/sch_ingress.c @@ -161,2 +161,5 @@ skb-tc_index = TC_H_MIN(res.classid); +#ifdef CONFIG_NET_SCH_INGRESS_TC2MARK +skb-mark =

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

jamal wrote: To classid x:y = mark=markx|y (classid :y = -j MARK --set-mark y, etc). --- linux-2.6.23-gentoo-r2/net/sched/Kconfig +++ linux-2.6.23-gentoo-r2.fixed/net/sched/Kconfig @@ -222,6 +222,16 @@ [..] skb-tc_index = TC_H_MIN(res.classid); +#ifdef

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

jamal wrote: Yes, I do so. But there are simple: --- if [[ $[TC_INDEX2MARK] == 0 ]] ; then ==1 c=${c//action ipt -j MARK --set-mark /flowid :} c=${c//action ipt -j MARK --set-mark 0x/flowid :} fi $c --- I didnt quiet understand what you have above. Does your script above read the

[PATCH 2.6.23+] ingress classify to [nf]mark

To classid x:y = mark=markx|y (classid :y = -j MARK --set-mark y, etc). --- linux-2.6.23-gentoo-r2/net/sched/Kconfig +++ linux-2.6.23-gentoo-r2.fixed/net/sched/Kconfig @@ -222,6 +222,16 @@ To compile this code as a module, choose M here: the module will be called sch_ingress.