> From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Tom > Eastep
> Tom Eastep wrote: > > Lux wrote: > >> Some time ago, I wrote some patches to be able to filter and masquerade > >> traffic based on the mark imposed on the packets in tcrules. > Now I ported > >> these patches to 3.4.2, I'd like it very much if someone with > some shorewall > >> development knowledge could review them. > >> You can find the story leading to these patches here > >> > http://www.mail-archive.com/[email protected]/ > msg01312.h > >> tml > >> > >> Thanks > >> Luigi > > > > Hi Luigi, > > > > The only problem that I see with the patches has to do with the > manpages. We > > maintain the manpage sources in Docbook XML format and generate > the manpages > > themselves from docbook. > > > > You can get the docbook source for the manpages from SVN (links are at > > http://www.shorewall.net/download.htm). They are in the > > shorewall/trunk/manpages directory. > > > > The Shorewall developers use XXE from xmlmind.com to maintain > our docbook > > source files -- it's a free download. > > One more question -- do you really think it is useful to extend the rules > file to include a MARK column? Did you have a usage scenario in mind? A the moment, the only really useful application of my patches I'm really sure about, is the one I wrote about on the list some time ago (two providers with only one outbound physical interface). This application involves only extending the masq file with the MARK column. I wrote the patches for tos, accounting and rules just to be cohorent. In particular, I think that having a MARK column in the rules file is handy, because if someone marks some traffic in the tcrules file, then it's likely he wants to ACCEPT this traffic too. I agree that this extension is not strictly indispensable: one can re-write in the rules file the same rule he wrote in the tcrules file. But it seems more elegant to me to be able to refer to the mark already applied to the packets. But frankly, I did not use this feature at the moment. Regards, Luigi ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
