Help on firewall hooks

3 messages, 3 authors, 2002-08-10 · open the first message on its own page

Help on firewall hooks

From: puja <hidden>
Date: 2002-07-31 04:34:36

Hello sir,

I wanted to clarify on some concepts in firewall hooks. I found FW_QUEUE 
as a return type in firewall hook functions in some codes which use 
firewall hooks. I wanted to know the significance of FW_QUEUE. When is 
this used as a return type in firewall hook functions ??

In the tcp/ip code for kernel 2.2.20, in ip_output.c; one of the 
comments says that when call_out_firewall returns FW_QUEUE silently drop 
the skb.
Can you please elaborate on this.


Thanks in advance
Regards
Puja Puri

TBF timing issues

From: Gabriel Paues <hidden>
Date: 2002-08-08 09:31:40

Hello!

I use the TBF filter with good results on my computer. When I set a rate
with the filter the traffic get shaped accordingly.

I have set up a couple of UML-instances (user-mode-linux) as a network
to test different QoS strategies. My problem is that the TBF calculates
the wrong rates. An UML-instance may get interrupted just like any other
program. Does the timing code in TBF presume that the kernel wont be 
interrupted, and therefore generates the wrong rates?

Ragards,

Gabriel Paues

Re: TBF timing issues

From: jamal <hidden>
Date: 2002-08-10 14:34:19

UML will never work well. The issue is related to the timer effects
in UML. I believe its more of a clock skew and innacuracy than TBF making
assumptions.

cheers,
jamal

On Thu, 8 Aug 2002, Gabriel Paues wrote:
Hello!

I use the TBF filter with good results on my computer. When I set a rate
with the filter the traffic get shaped accordingly.

I have set up a couple of UML-instances (user-mode-linux) as a network
to test different QoS strategies. My problem is that the TBF calculates
the wrong rates. An UML-instance may get interrupted just like any other
program. Does the timing code in TBF presume that the kernel wont be
interrupted, and therefore generates the wrong rates?

Ragards,

Gabriel Paues
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help