Tom Eastep wrote: > Orion Poplawski wrote: >> Any reason the LENGTH field from tcrules couldn't be added to tcfilters? I'd >> like to shape incoming large ssh packets differently that small ones. > > Only that the u32 classifier supports only a 'mask-and-compare-equal' > operator. So length checks other than length < power-of-2 would be truly > ugly.
I've added a LENGTH column to the tcfilters file for 4.3.12. But, as the above implies, it only accepts powers of 2 and only packets that are strictly shorter than the specified value will pass the rule. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp as they present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
