Re: [Shorewall-users] Marking packets...

[Tom E. <te...@sh...>]

--On Sunday, December 01, 2002 07:21:26 PM -0600 Homer Parker 
<hp...@ho...> wrote:

> On Sun, 01 Dec 2002 16:28:52 -0800 Tom Eastep <te...@sh...>
> wrote....
>
>>
>>
>> --On Saturday, November 30, 2002 07:59:48 PM -0600 Homer Parker
>> <hp...@ho...> wrote:
>>
>> > 	I'm not having alot of luck trying to get my packet marking setup
>> > 	the way
>> >
>> >
>> > 	Whatever gets caught by handle 3, also ends up in handle 4, so is
>> > throttled back to 256k, instead of being open.. I tried altering
>> > tcrules like this:
>>
>> Why don't you just reverse the order of the rules?
>
> 	I actually gave up on doing on the firewall at the house.. I'm going to
> be implementing Bering routers in two other places between me and the
> Internet, and will manage it that way... But, my question then would be,
> does it just go with the last rule found? That's not what I'm seeing, as I
> saw traffic in both classe, just more in teh one that went to 0.0.0.0/0...
>

The last tc rule that matches the packet is the one that will determine the 
packet's mark value.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://shorewall.sf.net
ICQ: #60745924  \ te...@sh...