LARTC - Jul 2001 - Mark with Iptables

Hey

I''ve been playing with bandwidth sharing and the best solution seems to
be a
mix of iptables and CBQ but I seem to be in trouble already. I''ve
choosen to
mark al traffic from my LAN going to the internet (upload) as according to
the following command which seems to work:

iptables -A PREROUTING -t mangle -i eth0 -p tcp -d ! 192.168.0.0/24 -j
MARK --set-mark 1

But how do I mark the data that''s being transferred through the
masquaraded
connection (download) established by the computers on the LAN?

Kovarththanan Rajaratnam wrote:
> 
> Hey
> 
> I''ve been playing with bandwidth sharing and the best solution
seems to be a
> mix of iptables and CBQ but I seem to be in trouble already. I''ve
choosen to
> mark al traffic from my LAN going to the internet (upload) as according to
> the following command which seems to work:
> 
> iptables -A PREROUTING -t mangle -i eth0 -p tcp -d ! 192.168.0.0/24 -j
> MARK --set-mark 1
> 
> But how do I mark the data that''s being transferred through the
masquaraded
> connection (download) established by the computers on the LAN?
You can mark the packets in the forward chain, so they are allready
demasqueraded.  I think that will work, but I didn''t tried it.


Stef

-- 

stafke@iname.com        stef.coene@belgacom.net
More QOS info : http://users.belgacom.net/staf/