Tom Eastep wrote: > Ralf Schenk wrote: > >> Why shouldn't we use the high marks for routing and connection-tracking >> if multiple providers are involved and the low marks for traffic >> shaping ? >> > > Ralf, > > You can, but you have to follow the rules. > > a) You set PACKET marks in PREROUTING for selecting which provider to use: > > 0x0200:P +PPPROUTING 0.0.0.0/0 > 0x0200:P 0.0.0.0/0 +PPPROUTING > > b) You use low marks in the FORWARD chains for traffic shaping: > > 1:F 0.0.0.0/0 0.0.0.0/0 tcp 22 >
The reason that I don't allow setting low marks in PREROUTING or OUTPUT (with HIGH_ROUTE_MARKS) is because fwmark routing rules do not allow specification of a mask! So if you had 4 non-zero tc mark values and 2 connection mark values, you would need (4 +1) * 2 = 10 routing rules to perform routing based on your 2 connection mark values. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
