Re: iptables breakage WAS(Re: dummy as IMQ replacement
From: jamal <hidden>
Date: 2005-03-23 19:45:12
On Wed, 2005-03-23 at 14:33, Andy Furniss wrote:
quoted
bantu:~# tc -s filter ls dev eth0 parent ffff:didn't get bash prompt back after doing this till <ctrl><c> but works and looks OK.
Needs investigation. Lets defer for now, and see if it continues to happen
Works if I direct to dummy0 aswell :-)
Good - hopefully we can now get to where you started ;-> I will send the kernel patch to Dave later.
The thing that still fails is trying to use MARK - but I guess that's not to do with mirred as I don't get any mention of it anymore.
For me all targets are compiled into the kernel; I didnt try with modules. If you have any modules try to compile in and see what happens. If it works it could spell trouble perhaps with some of the module replay code added recently.
[root@amd /home/andy/Qos]# tc qdisc del dev eth0 ingress
RTNETLINK answers: No such file or directory
[root@amd /home/andy/Qos]# tc qdisc add dev eth0 ingress
[root@amd /home/andy/Qos]# tc filter add dev eth0 parent ffff: protocol
ip prio 6 \
> u32 match ip src 10.0.2.24/32 flowid 1:16 \
> action ipt -j MARK --set-mark 1
tablename: mangle hook: NF_IP_PRE_ROUTING
target: MARK set 0x1 index 0
RTNETLINK answers: Invalid argument
We have an error talking to the kernelOk, try the module thing; actually try to modprobe mark target first and see if that works as well.
I get exactly the same error if I also add action mirred egress redirect dev lo - before I would get different.
Didnt follow - still related to ipt? cheers, jamal