>>
>> 2. in 'http://shorewall.net/traffic_shaping.htm' you wrote:
>> "the MARK value of the class preceded by the number "1"
>> (MARK value 1 is <minor> class 11, MARK value 22 is <minor>
>> class 122, and so on)"
>> And you use this (preceded by the number "1") value for 'tc filter'
>> command also but not for 'iptables' where you use MARK value without
>> "1" preceded. In result packets marked by 'iptables' don't selected
>> by 'tc filter'.
>
> That's correct -- Shorewall doesn't go around changing your tcrules
> behind your back. Yout must specify the correct classifier in
> /etc/shorewall/tcrules yourself (you must add the '1').
But Shorewall go around changing our tcclasses behind our back!
And you describe this fact and nothing happend.
I think if MARK value placed in two files you must make identical
things for both. Or you can generate class ID based on MARK (preceded
the number "1") but don't touch MARK value for 'tc filter'.
Why not?
Alex
-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
