>> Hello Tom, >> On the page 'http://lwn.net/Articles/313328/' i found info about >>changes >> in 'cls_flow.c' in kernel-2.6.29: >> >> net/sched/cls_flow.c | 4 +- >> >> and may be now it will work properly to everyone's entertainment. > > I have found that the following works ok for me: > > - Outbound filtering -- flow=ncft_src > - Inbound filtering -- flow=dst > > Check out the article at http://www.wlug.org.nz/TrafficControl. It talks > about the '100% packet loss' issue.
Thanks Tom, Very useful and smart information and investigations, but how actual? I didn't find any descriptions of the versions of the tested products. Did you try to discuss these defects with Perry Lorier? If i understand you correct, you already have production (working) version of 'cls_flow' control realization in Shorewall but also have some doubts about its behavior on other configurations? Here i can tell that Perry in his article talk about many pitfalls in 'tc' realization but you use almost all its features in Shorewall long time without any disaster. Thank you very much, Alex --- Прогноз погоды ТУТ - http://pogoda.tut.by ------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you'll get full speed at 300 dpi even with all image processing features enabled. http://p.sf.net/sfu/kodak-com _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
