alex wrote: >>> Hello Tom, >>> On the page 'http://lwn.net/Articles/313328/' i found info about >>> changes >>> in 'cls_flow.c' in kernel-2.6.29: >>> >>> net/sched/cls_flow.c | 4 +- >>> >>> and may be now it will work properly to everyone's entertainment. >> I have found that the following works ok for me: >> >> - Outbound filtering -- flow=ncft_src >> - Inbound filtering -- flow=dst >> >> Check out the article at http://www.wlug.org.nz/TrafficControl. It talks >> about the '100% packet loss' issue. > > Thanks Tom, > Very useful and smart information and investigations, but how actual? > I didn't find any descriptions of the versions of the tested products. > Did you try to discuss these defects with Perry Lorier?
No. > If i understand you correct, you already have production (working) > version > of 'cls_flow' control realization in Shorewall but also have some doubts > about its behavior on other configurations? Here i can tell that Perry in > his > article talk about many pitfalls in 'tc' realization but you use almost all > its features in Shorewall long time without any disaster. I have this working in 4.3.10+. The key thing, which I got out of Perry's article, was to set 'protocol all'. The code in 4.2.8 still has 'protocol ip'. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you'll get full speed at 300 dpi even with all image processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
