[mpls-linux-general] Re: mpls and port filtering

[Daniel T. <da...@un...>]

Hello,

> You will not beable to use the MPLS target with port filtering.  What you
> can do is:
>
> Create an MPLS tunnel interface.
> Create an MPLS outgoing label that uses nf2exp or nffwd.
> Attach it to the MPLS tunnel interface.
> Point the aggregate route out the MPLS tunnel interface
> Use iptables to set nfmask according to the TCP/UDP ports.
>
> Let me know if it works.

thank you for the fast response, unfortunately I have to
admit that I do not know what you mean with the terms
nf2exp and nffwd. Could you give some advise where to
find information, or go into greater detail?

Also, referring to Ulrich Duerholz mail, send 23 Feb 2002
requesting patch 0.4 again: Could this patch perhaps
be used to filter according to the port number or is it
a general property mpls and netfilter just can not offer?

Thanks in advance,

Daniel