> I have a hunch that classifying to a parent class shouldn't be allowed. > What happens if you try to configure a tcfilter that classifies to a:12? > When I got this error I had a lot going on at the time, but from what I remember, after the numerous combinations I tried, was that at some stage I had a warning from shorewall (something about not using a class which is a parent or something) - that actually prompted me to re-adjust tcclasses and change tcrules to allocate that match to the first leaf child instead. I can't be more specific though.
I'll try tcfilters with this and will let you know later on this evening. Yes, I agree, shorewall should pick this up and issue an error if this combination for some reason screws up the network completely, though I do not know why that is - the root class although can't be involved in any matches in tcrules or tcfilters has a traffic happily passing through it. ------------------------------------------------------------------------------ Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
