Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

Thanks again for your response tc -s qdisc ls dev eth0 qdisc htb 1: r2q 10 default 20 direct_packets_stat 0 Sent 12664555 bytes 9717 pkts (dropped 0, overlimits 374) qdisc sfq 150: parent 1:15 limit 128p quantum 1514b perturb 10sec Sent 0 bytes 0 pkts (dropped 0, overlimits 0) qdisc sfq 200:

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

I really don't get it : Recompiled my kernel dozen times now is 2.6.11-gentoo-r5 but still packets are marked by iptables but not shaped by tc. It only works when I mark packets on source/destination ip As soon as I comment last two lines and uncomment the first one shaping is gone

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working -altough marking on ip src, dst address works

Daniel Dafoe wrote: I really don't get it : Recompiled my kernel dozen times now is 2.6.11-gentoo-r5 but still packets are marked by iptables but not shaped by tc. It only works when I mark packets on source/destination ip As soon as I comment last two lines and uncomment the first

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working -altough marking on ip src, dst address works

Reading along the Net it seems that MAC marking is not working with egress HTB (because ipables marks packages based on --mac-source ). So my only choice is using ingress or u32. So this is how I did it: I called bellow script add_shaping DEV=eth0 tc qdisc add dev $DEV root handle 1: htb

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working -altough marking on ip src, dst address works

Daniel Dafoe wrote: Reading along the Net it seems that MAC marking is not working with egress HTB (because ipables marks packages based on --mac-source ). So my only choice is using ingress or u32. So this is how I did it: I called bellow script add_shaping DEV=eth0 tc qdisc add dev $DEV root

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

Daniel Dafoe wrote: I really don't get it : Recompiled my kernel dozen times now is 2.6.11-gentoo-r5 but still packets are marked by iptables but not shaped by tc. It only works when I mark packets on source/destination ip As soon as I comment last two lines and uncomment the first one shaping is

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

Daniel Dafoe wrote: --- Andy Furniss [EMAIL PROTECTED] wrote: Thanks for your input: modified DEV=eth0 indeed was a typo -- but still no luck with shaping iptables -L -vnt mangle Chain PREROUTING (policy ACCEPT 5172K packets, 2786M bytes) pkts bytes target prot opt in out source

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

--- Andy Furniss [EMAIL PROTECTED] wrote: Thanks for your input: modified DEV=eth0 indeed was a typo -- but still no luck with shaping iptables -L -vnt mangle Chain PREROUTING (policy ACCEPT 5172K packets, 2786M bytes) pkts bytes target prot opt in out source

Re: [LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

Daniel Dafoe wrote: === tc filter - based on iptables - MAC fw marking not working == DEV=eth1 snip Tried several times: tc qdisc del dev eth0 root eth0? iptables src MAC works for me with 1.3.1 - can you see the rule and counters matching with iptables -L -vnt mangle? Andy.

[LARTC] tc filter - based on iptables - MAC - MARK not working - altough marking on ip src, dst address works

=== tc filter - based on iptables - MAC fw marking not working == DEV=eth1 tc qdisc add dev $DEV root handle 1: htb default 20 tc class add dev $DEV parent 1: classid 1:1 htb rate 600kbps ceil 3276800kbit tc class add dev $DEV parent 1:1 classid 1:15 htb rate 3kbps prio 4 tc class add dev $DEV