[PATCH] NOTRACK only untracked

There are modification of NOTRACK netfilter target to avoid creating new connection entries for packets, unrelated to any existing connection. Best way to make new target (clone NOTRACK to NOTRACK-NEW and fix - to mix both), but I have enough motivation to this work ;) PS There are not same p

[PATCH] cls_u32 u32_classify() +

Currently fine u32 "hashkey ... at ..." not work with relative offsets. There are simpliest fix to use "eat". (sorry, v2) -- WBR, Denis Kaganovich, [EMAIL PROTECTED] http://mahatma.bspu.unibel.by diff -pruN linux-2.6.orig/net/sched/cls_u32.c linux-2.6/net/sched/cls_u32.c --- linux-2.6.orig/ne

[PATCH] cls_u32 u32_classify() ++

Currently fine u32 "hashkey ... at ..." not work with relative offsets. There are simpliest fix to use "eat". (sorry, i'm idiot) -- WBR, Denis Kaganovich, [EMAIL PROTECTED] http://mahatma.bspu.unibel.by diff -pruN linux-2.6.orig/net/sched/cls_u32.c linux-2.6/net/sched/cls_u32.c --- linux-2.

[PATCH] cls_u32 u32_classify()

Currently fine u32 "hashkey ... at ..." not work with relative offsets. There are simpliest fix to use "eat". -- WBR, Denis Kaganovich, [EMAIL PROTECTED] http://mahatma.bspu.unibel.by diff -pruN linux-2.6.orig/net/sched/cls_u32.c linux-2.6/net/sched/cls_u32.c --- linux-2.6.orig/net/sched/cls_u3

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

Too many pixels to smoke. Sorry. May be so? ;)) (if undefined classid not overwrited by random value tc_classify) Even "tc" say to classid=0 - "" --- 1/net/sched/sch_ingress.c 2008-01-12 17:27:05.0 +0200 +++ 2/net/sched/sch_ingress.c 2008-01-22 22:09:32.0 +0200 @@ -136,6

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

|(skb->tc_index=TC_H_MIN(res.classid)); +// skb->mark=res.classid; /* or just so */ +#endif return result; } jamal wrote: On Mon, 2008-14-01 at 20:20 -0200, Dzianis Kahanovich wrote: jamal wrote: [..] Did that make sense? After current "#endif" - may be. I am afra

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

jamal wrote: May be I am mix in mind other code (multi-class loop/walking) and this code. I am deprogramming... ;) Sorry, I just change focus from existing "tc_index=..." to common behaviour ;) [...] Please refer to what i said above; if what i said still doesnt make sense i can create (t

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

jamal wrote: I in doubts only about "action continue". To "and/or" behaviour one of best usage are (example): I dont think you should be touching the action part at all primarily because actions can set the mark after classification. Yes, I only do it by inertia after "#define tc_index mark

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

I in doubts only about "action continue". To "and/or" behaviour one of best usage are (example): # set bit 2 of mark to 0 (mark&0xfd|0) and continue tc filter add ... prio 1 ... flowid fd:0 action continue # continue tc filter add ... prio 2 ... - in current ingress_enqueue() code IMHO "case TC_

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

jamal wrote: Yes, I do so. But there are simple: --- if [[ $[TC_INDEX2MARK] == 0 ]] ; then ==1 c=${c//action ipt -j MARK --set-mark /flowid :} c=${c//action ipt -j MARK --set-mark 0x/flowid :} fi $c --- I didnt quiet understand what you have above. Does your script above read the flow

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

jamal wrote: To "classid x:y" = "mark=mark&x|y" ("classid :y" = "-j MARK --set-mark y", etc). --- linux-2.6.23-gentoo-r2/net/sched/Kconfig +++ linux-2.6.23-gentoo-r2.fixed/net/sched/Kconfig @@ -222,6 +222,16 @@ [..] skb->tc_index = TC_H_MIN(res.classid); +#ifdef CONFIG

Re: [PATCH 2.6.23+] ingress classify to [nf]mark

Patrick McHardy wrote: --- linux-2.6.23-gentoo-r2/net/sched/sch_ingress.c +++ linux-2.6.23-gentoo-r2.fixed/net/sched/sch_ingress.c @@ -161,2 +161,5 @@ skb->tc_index = TC_H_MIN(res.classid); +#ifdef CONFIG_NET_SCH_INGRESS_TC2MARK +skb->mark = (skb->mark&(res.classid>>16)

[PATCH 2.6.23+] ingress classify to [nf]mark

To "classid x:y" = "mark=mark&x|y" ("classid :y" = "-j MARK --set-mark y", etc). --- linux-2.6.23-gentoo-r2/net/sched/Kconfig +++ linux-2.6.23-gentoo-r2.fixed/net/sched/Kconfig @@ -222,6 +222,16 @@ To compile this code as a module, choose M here: the module will be called sch_