[prev in list] [next in list] [prev in thread] [next in thread] 

List:       lartc
Subject:    [LARTC] iptables & tc - 3 marks
From:       <mah () rapidnet ! com ! br>
Date:       2004-11-30 2:12:36
Message-ID: 20041130021236.1797.qmail () hm101 ! locaweb ! com ! br
[Download RAW message or body]

Hi....

Help me please!!!

I am using Linux Redhat as router of the my network.   I am to making NAT and \
firewall.

In my iptables script, I need make 3 MARKs for the same packet, as following 

# It marks the packets that will go for link ADSL  (I have 2 links - adsl 2Mb   and  \
'dedicate link' 256Mb ) # I am using  'ip rule / ip route'  to make this 
iptables -t mangle -A PREROUTING -p tcp --dport 21 -j MARK --set-mark 2000
iptables -t mangle -A PREROUTING -p tcp --dport 20 -j MARK --set-mark 2000

# It marks the packets that will be  shapped   ( upload   with cbq )
iptables -t mangle -A PREROUTING -m mac 00:11:22:33:44:55  -j MARK --set-mark 501
....
iptables -t mangle -A PREROUTING -m mac aa:bb:cc:dd:ee:ff  -j MARK --set-mark 631
###.  I have 130 hosts in my network


# It marks the packages that priority has ( with 'tc prio' command)
iptables -t mangle -A PREROUTING -p tcp --dport 22 -j MARK --set-mark 100
iptables -t mangle -A PREROUTING -p tcp --dport 23 -j MARK --set-mark 100
iptables -t mangle -A PREROUTING -p udp --dport 27000:27015 -j MARK --set-mark 110



But only last mark does function

Have solution ??  How to do?

#Marcio P. Silva
#linuXuser
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/


[prev in list] [next in list] [prev in thread] [next in thread]