[ILUG] Stupid iptables and tc question

Mel Gorman mel at csn.ul.ie
Sat Apr 30 15:39:54 IST 2005


I'm trying to match gaming traffic by using iptables to mark the traffic
and use tc to shape it. This should be very simple but I can't get the tc
command working.

This is how I mark the traffic;

iptables -t mangle -I PREROUTING -p udp --dport 1200 -j MARK --set-mark 100
iptables -t mangle -I PREROUTING -p udp --dport 27000:27015 -j MARK --set-mark 100
iptables -t mangle -I PREROUTING -p tcp --dport 27020:27039 -j MARK --set-mark 100

I'm trying to shape it with;

tc filter add dev eth2 parent 1: protocol ip prio 1 ip match mark 100
flowid 1:10

But I get an error saying 'Illegal "match"'. I have the ipt_mark and
ipt_MARK modules loaded. Can anyone what I'm missing? This is a 2.4.26
kernel


-- 
Mel Gorman
Part-time Phd Student                          Java Applications Developer
University of Limerick                         IBM Dublin Software Lab



More information about the ILUG mailing list