Ralf Schenk wrote: > > For entries in tcrules, the default mask value is 0xffff except in these > cases: > * RESTORE rules use a default mask value of 0xff. > * SAVE rules use a default mask value of 0xff. > > So the above is a bug in my point of view... >
I've corrected the documentation to mention that connection marking rules also use a mask of 0xFF. I will change the code, however, to only specify the mask when HIGH_ROUTE_MASK=Yes is used; that way, users who don't have Extended CONNMARK SUPPORT can still use connection marks with HIGH_ROUTE_MASK=No. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users