On 9/8/2015 11:26 AM, Tom Eastep wrote:
> On 9/8/2015 4:32 AM, Vieri Di Paola wrote:
>>
>>> Add this in /etc/shorewall/mangle:
>>>
>>> INLINE(MARK(1)):P 10.215.247.194 10.215.236.221 ; \
>>> -m statistic --mode random --probability 0.50
>>> MARK(2):P 10.215.247.194 10.215.236.221 { test=0/0xff }
>>>
>>> -Tom
>>
>>
>> I suppose you meant this:
>>
>> INLINE(1):P 10.215.247.194 10.215.236.221 ; \
>> -m statistic --mode random --probability 0.50
>> MARK(2):P 10.215.247.194 10.215.236.221 { test=0/0xff }
>>
>
> No -- I meant what I wrote. Prior to 4.6.13, the man page for the
> 'mangle' file has incorrect examples.
Although, I had forgotten that I had added a PROBABILITY column to the
mangle file. So you can express these rules as:
MARK(1):P 10.214.247.194 10.215.236.221 { probability=0.50 }
MARK(2):P 10.214.247.194 10.215.236.221 { test=0/0ff }
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
