| de7db5d85728fe8d9a33fe968427503c164a32c3 |
|
06-Jan-2016 |
Phil Sutter <phil@nwl.cc> |
tc: m_connmark: Fix help text
When specifying a conntrack zone, the 'zone' keyword has to be used
before the actual zone index.
Signed-off-by: Phil Sutter <phil@nwl.cc>
/external/iproute2/tc/m_connmark.c
|
| 5c32fa1d698fd221ffdc0d84118d7f77331da175 |
|
18-Sep-2015 |
Phil Sutter <phil@nwl.cc> |
comment: Fix remaining listings of wrong FSF address
This patch follows the changes of commit 4d98ab0 ("Fix FSF address in
file headers"), fixing file headers added after it.
Signed-off-by: Phil Sutter <phil@nwl.cc>
/external/iproute2/tc/m_connmark.c
|
| b8d5c9a71bfba87405e6d169760dd8db41a4bbdf |
|
15-Feb-2015 |
Felix Fietkau <nbd@openwrt.org> |
tc: add support for connmark action
Add ability to add the netfilter connmark support.
Typical usage:
...lets tag outgoing icmp with mark 0x10..
iptables -tmangle -A PREROUTING -p icmp -j CONNMARK --set-mark 0x10
..add on ingress of $ETH an extractor for connmark...
tc filter add dev $ETH parent ffff: prio 4 protocol ip \
u32 match ip protocol 1 0xff \
flowid 1:1 \
action connmark continue
...if the connmark was 0x11, we police to a ridic rate of 10Kbps
tc filter add dev $ETH parent ffff: prio 5 protocol ip \
handle 0x11 fw flowid 1:1 \
action police rate 10kbit burst 10k
Other ways to use the connmark is to supply the zone, index and
branching choice. Refer to help.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Signed-off-by: Jamal Hadi Salim <jhs@mojatatu.com>
/external/iproute2/tc/m_connmark.c
|