On 01/09/2013 02:48 PM, Tom Eastep wrote: > On 01/09/2013 02:17 PM, Eric Teeter wrote: >> Dear Tom: >> >> I am trying to use tcrules to give TOS to my phone system. >> >> The following does not give me any error but is there improvements that >> can be made? >> >> /etc/shorewall/tcrules >> >> #ACTION SOURCE DEST PROTO PORT(S) >> SOURCE USER TEST LENGTH TOS CONNBYTES HELPER >> 1 0.0.0.0/0 192.168.1.249 udp >> 10000:20000 - - - - 16 >> 1 192.168.1.249 0.0.0.0/0 udp >> 10000:20000 - - - - 16 >> > > Do you use the SIP helper?
Your LENGTH field is too short. The IP header by itself is 24 bytes (without any options). The UDP header is is another 16 bytes. Unless you are shaping both your internal and external interfaces, 192.168.1.249 is either going to be the SOURCE or the DEST address; it won't be both. The reason that I ask about the HELPER is that, if you do use the helper, you can simply place 'sip' in the HELPER column. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Master Java SE, Java EE, Eclipse, Spring, Hibernate, JavaScript, jQuery and much more. Keep your Java skills current with LearnJavaNow - 200+ hours of step-by-step video tutorials by Java experts. SALE $49.99 this month only -- learn more at: http://p.sf.net/sfu/learnmore_122612
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
