Ralf Schenk wrote:

> 
> For entries in tcrules, the default mask value is 0xffff except in these
> cases:
>     *  RESTORE rules use a default mask value of 0xff.
>     *  SAVE rules use a default mask value of 0xff.
> 
> So the above is a bug in my point of view...
> 

I've corrected the documentation to mention that connection marking rules also
use a mask of 0xFF.

I will change the code, however, to only specify the mask when
HIGH_ROUTE_MASK=Yes is used; that way, users who don't have Extended CONNMARK
SUPPORT can still use connection marks with HIGH_ROUTE_MASK=No.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to