alex wrote:
    Hello Tom!
    I found several stranges (bugs) in Shorewall-4.1.6 shaping.

Hello Alex,

The current development version is 4.1.8.


  1.  in file 'tcclasses' i can use 'tcp-ack' or 'tos-' options with
      CLASSES but not with MARKS, f.e.:

eth0:21   -    250kbit   full    9    tcp-ack,tos-minimize-delay   # run OK

eth0      21   250kbit   full    9    tcp-ack,tos-minimize-delay   # FAIL

        How does it fail? I just ran a test here and 4.1.8 seems to compile
        the second line correctly.


  2.  in 'http://shorewall.net/traffic_shaping.htm' you wrote:
         "the MARK value of the class preceded by the number "1"
          (MARK value 1 is <minor> class 11, MARK value 22 is <minor>
          class 122, and so on)"
      And you use this (preceded by the number "1") value for 'tc filter'
      command also but not for 'iptables' where you use MARK value without
      "1" preceded. In result packets marked by 'iptables' don't selected
      by 'tc filter'.

        That's correct -- Shorewall doesn't go around changing your tcrules
        behind your back. Yout must specify the correct classifier in
        /etc/shorewall/tcrules yourself (you must add the '1').

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to