[prev in list] [next in list] [prev in thread] [next in thread] 

List:       l7-filter-developers
Subject:    Re: [l7-filter-developers] Tc patch and layer7
From:       Matthew Strait <quadong () users ! sourceforge ! net>
Date:       2005-11-06 2:47:10
Message-ID: Pine.LNX.4.64.0511052039050.6556 () mattdesk ! strait
[Download RAW message or body]

> applied netfilter patch v1.5
> applied tc patch
> sucessfully patched tc
> patched iptables

tc patch?  We haven't offered a tc patch in a long time.  What exactly is 
this patch you applied?

> tc filter add dev eth0 protocol ip parent 1:0 prio 2 layer7 protocol
> msnmessenger classid 1:101
>
> this filter dont work. and it doesnt give me any error

The current l7-filter does not work like this.  It only modifies 
Netfilter/iptables.  There is no layer7 option for tc.  (Well, unless you 
dredged up some ancient patch of ours.)

> Ive tried marking with iptables:
>
> tc filter add dev eth0 parent 1:0 protocol ip prio 2 handle 101 fw classid
> 1:101
> /sbin/iptables -t mangle -A POSTROUTING -m layer7 --l7proto msnmessenger -j
> MARK --set-mark 101
>
> no error, but no sucess.

This is the correct approach.  I'm very bad at tc (because it is a very 
obtuse program), so I can't tell you why it is not working.  I recommend 
that you consult the sample script which is included in the HOWTO: 
http://l7-filter.sourceforge.net/L7-HOWTO-Netfilter .  Perhaps someone 
else on this list or the LARTC list can help you if that doesn't.

-matthew


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
L7-filter-developers mailing list
L7-filter-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/l7-filter-developers
[prev in list] [next in list] [prev in thread] [next in thread]