search for: mangle_output

...bles -t mangle -A PREROUTING -i eth1 -j MANGLE_PREROUTING With the above, I could see packets being marked as they enter into eth1, as expected. Using iptables -L -t mangle -v, I could see the statistics of the chain. However, originally, I had the iptables set up below:- iptables -t mangle -N MANGLE_OUTPUT iptables -t mangle -F MANGLE_OUTPUT iptables -t mangle -A MANGLE_OUTPUT -p ALL -j MARK --set-mark 2 iptables -t mangle -A MANGLE_OUTPUT -p tcp --dport 1214 -j MARK --set-mark 3 iptables -t mangle -A MANGLE_OUTPUT -p icmp -j MARK --set-mark 0 iptables -t mangle -A MANGLE_OUTPUT -p tcp --dport 0:1024...

..., SMTP traffic at a higher priority than FTP serving and Kazza traffic. However, when the FTP server is busy servicing FTP traffic, web browsing traffic has dragged to almost unusable. Abstract of my iptables script follows:- # Mark traffic on the firewall machine itself $IPTABLES -t mangle -A MANGLE_OUTPUT -p 1 -j MARK --set-mark 1 $IPTABLES -t mangle -A MANGLE_OUTPUT -p 6 -m multiport --sport 22,53 -j MARK --set-mark 2 $IPTABLES -t mangle -A MANGLE_OUTPUT -p 17 --sport 53 -j MARK --set-mark 2 $IPTABLES -t mangle -A MANGLE_OUTPUT -p 6 -m length --length :64 -j MARK --set-mark 1 $IPTABLES -t mangle...