[prev in list] [next in list] [prev in thread] [next in thread] 

List:       lartc
Subject:    Re: [LARTC] invert u32 match selector
From:       richard lucassen <mailinglists () lucassen ! org>
Date:       2006-02-26 17:38:08
Message-ID: 20060226183808.57c0e2f0.mailinglists () lucassen ! org
[Download RAW message or body]

On Sat, 25 Feb 2006 16:04:06 +0000
Andy Furniss <andy.furniss@dsl.pipex.com> wrote:

> > And why doesn't this work? (I send all port 80 to 1.2.3.4 to class
> > 14 /before/ I send the rest to classid 13):
> > 
> > $TC filter add dev ${DEV_IFB} parent 1:0 prio 2 protocol ip u32 \
> >   match ip protocol 0x6 0xff \
> >   match ip dport 80 0xffff \
> >   match ip dst 1.2.3.4/32 \
> >   classid 1:14
> > 
> > $TC filter add dev ${DEV_IFB} parent 1:0 prio 2 protocol ip u32 \
> >   match ip protocol 0x6 0xff \
> >   match ip dport 80 0xffff \
> >   classid 1:13
> > 
> > Any ideas?
> 
> Looks OK to me - try what Anton suggested to be safe but order is 
> usually enough.

ok, thnx.
 
> I guess IFB means this is ingress - if you are doing nat / or the ip
> you match is on that machine maybe it not passing ifb with the address
> you expect.

Hmm, I don't think so because the ip is the machine itself and it won't
be translated...

R.

-- 
___________________________________________________________________
It is better to remain silent and be thought a fool, than to speak
aloud and remove all doubt.

+------------------------------------------------------------------+
| Richard Lucassen, Utrecht                                        |
| Public key and email address:                                    |
| http://www.lucassen.org/mail-pubkey.html                         |
+------------------------------------------------------------------+
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[prev in list] [next in list] [prev in thread] [next in thread]