similar to: Routing based on user id

Hello - What I want to do seems very simple - I want to make sure any H.323 traffic gets processed before anything else entering or leaving this network. The network has a videoconferencing device on the LAN at 192.168.16.4. A Linux firewall NATs an external IP Address to this internal address and I have appropriate SNAT and DNAT rules that work. The NAT and connection tracking rules all work

Hi, Can anybody tell me how to delete DSCP or TOS setting using iptable command. iptables --list OUTPUT --table mangle Chain OUTPUT (policy ACCEPT) target prot opt source destination DSCP tcp -- anywhere anywhere tcp spt:http DSCP s et 0x08 DSCP udp --

Hi all, I am wondering if anyone can help me to resolve a problem. I am trying to use tc command in linux to drop udp packets of specific diffserv value. I am able set diffserv value successfully in the udp packet using command:- [root@scotch src]#iptables --table mangle --append OUTPUT \ --out-interface eth0 --protocol udp --source-port 5060 \ --jump DSCP --set-dscp 8 but i am not able to

Real networks use either PREC (as it maps 1:1 to 802.1p and MPLS TC) or DSCP. Interactive SSH uses PREC 0x0, which is just best-effort and DSCP 0x4 which has no standard meaning (found network where DSCP 0x4 was dropped, completely, as it didn't hit any defined/allowed QoS class, obviously misconfig, BE class should eat anything not already defined) Should interactive use TOS value which has

Can anyone comment on the DSCP quality of service settings on your Asterisk server? The network we're setting up has data on the default VLAN, Asterisk server and phones on VLAN 4, and we're using Polycom phones with a PC hooked up to the phone's pass-thru port. What iptables settings are you using on the Asterisk server for DSCP? What are your Polycom DSCP settings? We're using

Hello everybody, I have tried several iptables versions (from 1.2.4 to 1.2.6a) to mark outgoing packets (change the DSCP field) with no success. #iptables -A OUTPUT -t mangle -d 10.0.0.3 -j DSCP --set-dscp 0x2 iptables v1.2.6a: unknown arg ''--set-dscp'' TOS target is working fine, but I want to create different codes for EF and AF classes in a diffserv

here is the situation i am using htb.init with fwmark to do QoS. i have 2 parent classes with RATE=CEIL which then have some leafs each on his own. the first one works fine (it shapes the packets to the specified rate) class htb 1:21 root rate 1Mbit ceil 1Mbit burst 2909b cburst 2909b Sent 631520262 bytes 651550 pkts (dropped 0, overlimits 0) rate 131573bps 141pps lended: 380595 borrowed: 0

Has anyone figured this out yet? Lots of places say to add the following to sip.conf of an Asterisk 1.2 system (current production machine/Asterisk as root): tos=0xB8 (Hex B8 = Decimal 184 = Binary 10111000) or if you are running Asterisk v1.4 or newer: tos_sip=cs3 ; Sets TOS for SIP packets. tos_audio=ef ; Sets TOS for RTP audio packets. tos_video=af41 ;

This problem is driving nuts, so I am seeking help here. Your help will be deeply appreciated. I have made myself a Linux bridge with eth1 and eth0 to form br0. Then I run a script to configure tc with htb on it. But I can never match non-icmp traffic ( such as tcp and udp ) with TOS or DSCP values such as 0x68. The full story as follows :- 1. On the source testing machine, I do this to set

Hello, all. I've stumbled across what seems to be a traffic prioritization issue in a Linux environment and wonder if anyone else has encountered or addressed this issue. We had planned to use expedited forwarding for our RTP and perhaps our SIP packets. Our plan was to set DSCP to 101110 (by the way, I think document http://www.voip-info.org/wiki/view/snom+360 is in error as I'm almost

I''m successfully using HTB + GRED to shape traffic based on the DSCP field. I would like to strip the DSCP and possibly replace it with normal ToS bits on egress traffic leaving my network. Leaving DSCP set is pointless, and could potentially cause problems with some ISPs that use DSCP internally I suppose. Setting ToS bits would seem ideal as most networks still honor it to varying

HI there. First of all: xm dmesg | grep -i vmx returns nothing! Cat /proc/cpuinfo returns processor : 0 vendor_id : AuthenticAMD cpu family : 15 model : 43 model name : AMD Athlon(tm)64 X2 Dual Core Processor 3800+ stepping : 1 cpu MHz : 2009.182 cache size : 512 KB physical id : 0 siblings : 1 core id : 0 cpu cores :

Did anyone ever answer this one? THIS is what I am trying to do: >[LARTC] cbq+sfq and DSCP marking >Maria Joana Urbano stmaria@dei.uc.pt >Thu, 13 Feb 2003 19:29:42 +0000 > > * Previous message: [LARTC] Monitoring.... > * Next message: [LARTC] two routes 1 network card > * Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] >

Hi, DSCP match in /tcrules/ doesn''t work with CS6 and CS7, it provides an error "invalid value" for string and hexa values. It seems that it comes from /Chain.pm/, in the function /do_dscp/: fatal_error( "Invalid DSCP ($dscp)" ) unless defined $value && $value < 0x2f && ! ( $value & 1 ); I dont understand why "$value < 0x2f", but

https://bugzilla.mindrot.org/show_bug.cgi?id=1964 Bug #: 1964 Summary: QoS/DSCP names false translated to ToS hex value Classification: Unclassified Product: Portable OpenSSH Version: 5.9p1 Platform: amd64 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ssh

I''m having trouble routing on high fwmarks, I want to use a lot of different marks for 2 routes so that I can QoS based on the marks ip rule looks like this: 0: from all lookup local 32751: from all fwmark 31 lookup dslout 32752: from all fwmark 30 lookup dslout 32753: from all fwmark 29 lookup dslout 32754: from all fwmark 28 lookup dslout 32755: from

hello I''m new here can I ask about how to do a patch dscp to shorewall installed from the package in ubuntu? ------------------------------------------------------------------------------ Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, databases, vmware, SAP, cloud infrastructure, etc. Download 30-day Free Trial.

Isn''t it possible with iptables to filter on DSCP field? Thanks, Tom Aernoudt

I am assuming that the TOS values directly map to DSCP values in the ip header. Is this a correct assumption? If so, can someone tell me the correct setting to set call control packets with a DSCP of AF31(011010) and media with EF(101110)? So would the setting for AF be TOS=46?? Is it possible to mark the media and call control separately?? -------------- next part -------------- An HTML

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible