Re: More layer7 filtering issues

Thomas Graf
Thu, 25 Sep 2003 15:22:53 -0000

Hi

> So, 1:10 is getting data passed through it, but I can''t figure out
a way to
> attach a policing filter that just drops them all into oblivion.

tc filter add dev $DEV parent ffff: \
   protocol ip prio 20 \
   u32 match ip protocol 1 0xff \
   police mtu 1 drop \
   flowid :1

Drops all packets with a length > 1 byte which is probably
what you want.

Regards,

--
Thomas GRAF