On 9/10/12 6:34 AM, "Tom Eastep" <[email protected]> wrote:
>On 09/09/2012 05:08 PM, Mr Dash Four wrote: > >> Call me thick, but I still don't get it! >> >> Where do you currently use the priority specified in the PRIORITY >> column in tcclasses? > >In 'tc class add' commands. >> >> Am I right in assuming that this is a different "priority" which is >> present in the tc statements, which you just added in your patch (to >> be specified in tcfilters)? > >Yes -- the new PRIORITY is used in 'tc filter add' commands generated by >entries in /etc/shorewall/tcfilters. > >> >> Also, how is the priority for outgoing packets determined (those that >> are defined in tcrules)? > >In the current code, the priority of that filter is <priority of the >corresponding class> LAND 20. This allows entries in >/etc/shorewall/tcfilters to override firewall marks. Correction: it is ( <priority of the corresponding class> << 8 ) | 20. -Tom You do not need a parachute to skydive. You only need a parachute to skydive twice. ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
