Hi, I wonder if i change imq-patch +static struct nf_hook_ops imq_egress_ipv4 = { + { NULL, NULL}, + imq_nf_hook, + PF_INET, + NF_IP_POST_ROUTING, + NF_IP_PRI_LAST +}; to + NF_IP_POST_ROUTING, + NF_IP_PRI_MANGLE+1 will this be working correctly? (I''d like to use imq to shape traffic before SNAT changes source, and after filter rules applies) Regards mikee __________________________ ignore ads below this line Serwis www.logo.hoga.pl - sciągaj bajery na telefony Nokia, Siemens, Alcatel, Ericsson, Motorola,Samsung ------------------------------------------------------------ Promocja!!! rabat 40 % na zakup mks_vir 2003 dla klientów Connect , którzy posiadaja kupony rabatowe. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
mikee wrote:>Hi, >I wonder if i change imq-patch >+static struct nf_hook_ops imq_egress_ipv4 = { >+ { NULL, NULL}, >+ imq_nf_hook, >+ PF_INET, >+ NF_IP_POST_ROUTING, >+ NF_IP_PRI_LAST >+}; > >to >+ NF_IP_POST_ROUTING, >+ NF_IP_PRI_MANGLE+1 > >will this be working correctly? >(I''d like to use imq to shape traffic before SNAT changes source, and after filter rules applies) >then you need to use NF_IP_PRI_FILTER < x < NF_IP_PRI_NAT_SRC, for example NF_IP_PRI_FILTER + 1 or NF_IP_PRI_NAT_SRC - 1. look into include/linux/netfilter_ipv4.h for a list of pre-defined values. Patrick _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>then you need to use NF_IP_PRI_FILTER < x < NF_IP_PRI_NAT_SRC, >for example NF_IP_PRI_FILTER + 1 or NF_IP_PRI_NAT_SRC - 1. >look into include/linux/netfilter_ipv4.h for a list of pre-defined values. > >Patrickthanks for your help, i only wonder if NF_IP_PRI_MANGLE+1 would be sufficient, since there is no "filter" table/hook (is there?) in postrouting? (according to http://docum.org/stef.coene/qos/kptd) i understand difference between suffcient and right/proper, i''m just trying to understand netfilter architecture :-) __________________________ ignore ads below this line Serwis www.logo.hoga.pl - sciągaj bajery na telefony Nokia, Siemens, Alcatel, Ericsson, Motorola,Samsung ------------------------------------------------------------ Promocja!!! rabat 40 % na zakup mks_vir 2003 dla klientów Connect , którzy posiadaja kupony rabatowe. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/