LARTC
[Top] [All Lists]

Re: [LARTC] shaping using source IP after NAT

To: lartc@mailman.ds9a.nl
Subject: Re: [LARTC] shaping using source IP after NAT
From: "Ethy H. Brito" <ethy.brito@inexo.com.br>
Date: Wed, 13 Jun 2007 15:18:28 -0300
Delivered-to: sp-com-lists@consult.net
Delivered-to: lartc-list@securepoint.com
Delivered-to: lartc@outpost.ds9a.nl
In-reply-to: <466D9C47.7070909@relef.net>
List-archive: <http://mailman.ds9a.nl/pipermail/lartc>
List-help: <mailto:lartc-request@mailman.ds9a.nl?subject=help>
List-id: "Mailinglist of the Linux Advanced Routing &amp; Traffic Control project" <lartc.mailman.ds9a.nl>
List-post: <mailto:lartc@mailman.ds9a.nl>
List-subscribe: <http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc>, <mailto:lartc-request@mailman.ds9a.nl?subject=subscribe>
List-unsubscribe: <http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc>, <mailto:lartc-request@mailman.ds9a.nl?subject=unsubscribe>
Organization: InterNexo Ltda.
References: <20070611155834.075b7462@pulsar.inexo.com.br> <466D9C47.7070909@relef.net>
Sender: lartc-bounces@mailman.ds9a.nl
On Mon, 11 Jun 2007 22:02:31 +0300
VladSun <vladsun@relef.net> wrote:


> TC is performed after POSTROUTING, so you can not do any IP related TC 
> filtering. You can use CPU friendly patches for iptables like IPMARK or 
> IPCLASSIFY. Take a look at them.

Ok. Can someone point me the right direction to add IPMARK kernel support?

I downloaded patch-o-matic today's snapshot and there is no IPMARK there.

I have iptables-1.3.7 and kernel 2.6.21.1 sources (distro is slackware 11.0)

The curious thing is that IPMARK is at iptables man page but I got and
error when I execute it. It says it could not
find /usr/lib/iptables/libipt_IPMARK.so:

# locate -i IPMARK
# (no output here)


Regards.

Ethy

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

<Prev in Thread] Current Thread [Next in Thread>