Harald Welte wrote: > The ECN target supports the following operations: > > -p tcp -j ECN --ecn-tcp-remove
As discussed before, I think there should be an --ecn-remove, which both a) Clears all the ECN bits from the TCP header on TCP packets b) Sets the IP level ECN codepoint to 0 I don't see any value in being able to manipulate the bits other than to clear them, and if selected to clear them then the ECN bits should be cleared at all levels. This also applies quite nicely to non-TCP packets. Regards Henrik
