On Tue, Aug 18, 2015, at 03:28 PM, Tom Eastep wrote:
> It depends on how you have broken down the mark for various uses -- see
> http://www.shorewall.org/PacketMarking.html#Values.
Thanks.
The problem was the mask -- for the given mark format.
For the used marks, editing in shorewall6.conf
MASK_BITS=
PROVIDER_BITS=
PROVIDER_OFFSET=
TC_BITS=
ZONE_BITS=0
to
MASK_BITS=8
PROVIDER_BITS=8
PROVIDER_OFFSET=8
TC_BITS=8
ZONE_BITS=0
cures that problem. I've another/next,
Setting up Accept Routing Advertisements...
Adding Providers...
RTNETLINK answers: File exists
ERROR: Command "/sbin/ip -6 route add table 1 fe80::/64 dev eth0
proto kernel metric 256 pref medium" Failed
Restoring Shorewall6 Lite...
which, IIUC, is unrelated to the Mark/Mask.
------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
