Steven Jan Springl wrote: > Tom > > When tcfilters contains: > > eth0:33 1.1.1.1 2.2.2.2 sctp 80 8000 > > the following rule is generated: > > run_tc filter add dev eth0 protocol ip parent 1:0 prio 10 u32 ht 0x001:0\ > match u32 0x00000050 0x0000ffff at nexthdr+0\ > match u32 0x1f400000 0xffff0000 at nexthdr+0\\ > flowid 1:33 > > which produces the following error: > > Illegal "match" > ERROR: Command "tc filter add dev eth0 protocol ip parent 1:0 prio 10 u32 > ht 0x001:0 match u32 0x00000050 0x0000ffff at nexthdr+0 match u32 0x1f400000 > 0xffff0000 at nexthdr+0\" Failed > > Note: If the protocol is changed to tcp or the source port is removed, the > problem does not occur. >
Corrected in commit 5758ba3f6975bb4e1333281b9833ed354318ff19. Thanks, Steven -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you'll get full speed at 300 dpi even with all image processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
