On 11/28/12 6:21 AM, Fred Maillou wrote:

>   In tcrules' tos field, what would be the right way of
> specifying a numerical value ?  Both '16' and '0x10' sucessfully
> pass the 'shorewall check' test - does this mean that both are
> valid ?

Yes, and they are equivalent.

  I've looked at the configuration_file_basics page but
> did not seem to find an explicit reference about a numerical
> format such as the one used for this tos field.

All numbers in Shorewall input default to decimal except those dealing
with tc devices and classes; those are always interpreted as hex
(because that is how tc interprets them).
> I'm asking as
> I'm getting into troubleshooting what seems at first outlook a
> problem in not having the same result when for instance the
> string 'Minimize-Delay' is used when compared to using the string
> '0x10'.

Those are different - 0x10 assumes a mask of 0xff while 'Minimize-Delay'
assumes a mask of 0x3f; that is clearly described in the tcrules manpage.

> 
>   Also, is there a system command that can be used to verify that
> the tos value is actually observed in a tcrule ?  A command such
> as 'tc -s -d class show dev <name>' does not provide this
> information.

'shorewall show filters'. The complex TC article includes a tutorial
about understanding the output.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Keep yourself connected to Go Parallel: 
INSIGHTS What's next for parallel hardware, programming and related areas?
Interviews and blogs by thought leaders keep you ahead of the curve.
http://goparallel.sourceforge.net
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to