Hi Jon,
You can use iptables to mark/change the DSCP value of an incoming packet on
the ingress side. An example is below (where $in_dev can be whatever your
input interface is):
ip tables -t mangle -A FORWARD -i $in_dev -p tcp --ports 80 -j DSCP
--set-dscp-class BE
Basically the above example (re)marks all www traffic (meant to be forwarded
through this node) entering via $in_dev to BE.
There is a decent (IMO) manpage for iptables (there are too many
permutations/combinations of options to list here).
> -----Original Message-----
> From: lartc-bounces@xxxxxxxxxxxxxxx [mailto:lartc-bounces@xxxxxxxxxxxxxxx]
> On Behalf Of Flechsenhaar, Jon J
> Sent: Monday, August 06, 2007 7:08 PM
> To: LARTC@xxxxxxxxxxxxxxx
> Subject: Marking and remarking of incoming traffic
>
> I can use DSMARK to mark on the Egress side. Is there a way to
> mark/change the DSCP value of an incoming packet on the ingress side?
> Thanks.
>
>
> Jon Flechsenhaar
> Boeing WNW Team
> Network Services
> (714)-762-1231
> 202-E7
>
> _______________________________________________
> LARTC mailing list
> LARTC@xxxxxxxxxxxxxxx
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
[Bugtraq]
[Fedora Legacy]
[GCC Help]
[Yosemite News]
[Yosemite Photos]
[IP Tables]
[Netfilter Devel]
[Fedora Users]