On 05/12/2011 02:10 PM, Mr Dash Four wrote: > >> I have a hunch that classifying to a parent class shouldn't be allowed. >> What happens if you try to configure a tcfilter that classifies to a:12? >> > When I got this error I had a lot going on at the time, but from what I > remember, after the numerous combinations I tried, was that at some > stage I had a warning from shorewall (something about not using a class > which is a parent or something) - that actually prompted me to re-adjust > tcclasses and change tcrules to allocate that match to the first leaf > child instead. I can't be more specific though.
There is an error generated when a class with dmax and/or umax is specified and the class is used as a parent class. > > I'll try tcfilters with this and will let you know later on this > evening. Yes, I agree, shorewall should pick this up and issue an error > if this combination for some reason screws up the network completely, > though I do not know why that is - the root class although can't be > involved in any matches in tcrules or tcfilters has a traffic happily > passing through it. I have a two-line patch ready that rejects tcfilters and tcrules that spacify a non-leaf class. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
