Shorewall users - Jan 2005 - ipp2p doc error

I think I''ve found a mistake in the http://www.shorewall.net/ipp2p.html
documentation. 
I''ve been trying to get traffic shaping working on the p2p traffic 
(Using ipp2p and wonder shaper) and lossing clumps of hair in the process. 
I followed the web page documentation but the "tcpost" rule that 
clasifies the packet and actually starts the "castration" process
never
matached any packets.... Until! I added a ":C" to the final two lines
on
that page (although it''s only one line in my config).  I maybe wrong, 
but this seems correct as the filter is now matching packets in the 
entire connection rather than the first packet in the connection (the 
one picked up by ipp2p).
I may be wrong but my setup is as follows:

Internet<--->ADSL
Modem<--->eth1~~Firewall~~br0(bridge:eth0,2)<--->localnet

ipp2p is checked for on the firewall and on localnet.

Hope this helps.

Richard Collins wrote:
> I think I''ve found a mistake in the
http://www.shorewall.net/ipp2p.html
> documentation. I''ve been trying to get traffic shaping working on
the
> p2p traffic (Using ipp2p and wonder shaper) and lossing clumps of hair
> in the process. I followed the web page documentation but the
"tcpost"
> rule that clasifies the packet and actually starts the
"castration"
> process never matached any packets.... Until! I added a ":C" to
the
> final two lines on that page (although it''s only one line in my
> config).  I maybe wrong, but this seems correct as the filter is now
> matching packets in the entire connection rather than the first packet
> in the connection (the one picked up by ipp2p).
> I may be wrong but my setup is as follows:
> 
> Internet<--->ADSL
Modem<--->eth1~~Firewall~~br0(bridge:eth0,2)<--->localnet
> 
> ipp2p is checked for on the firewall and on localnet.
> 
> Hope this helps.
There''s something wrong here because the first four rules should ensure
that the connection mark and the packet mark are the same. Please post
your tcrules file and the output of "shorewall show mangle".


-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key