mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-13 04:22:58 +02:00
QoS: move layer7 unspec match to PREROUTING
in POSTROUTING it not get the local answerpackets. Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
@@ -252,8 +252,8 @@ foreach $subclassentry (sort @subclasses) {
|
||||
}
|
||||
print <<END
|
||||
|
||||
### add l7-filter to POSTROUTING chain to see all traffic
|
||||
iptables -t mangle -A POSTROUTING -m layer7 --l7proto unset
|
||||
### add l7-filter to PREROUTING chain to see all traffic
|
||||
iptables -t mangle -A PREROUTING -m layer7 --l7proto unset
|
||||
|
||||
### ADD QOS-OUT CHAIN TO THE MANGLE TABLE IN IPTABLES
|
||||
iptables -t mangle -N QOS-OUT
|
||||
@@ -715,7 +715,7 @@ print <<END
|
||||
iptables -t mangle --flush QOS-TOS >/dev/null 2>&1
|
||||
iptables -t mangle --delete-chain QOS-TOS >/dev/null 2>&1
|
||||
# remove l7-filter
|
||||
iptables -t mangle --delete POSTROUTING -m layer7 --l7proto unset
|
||||
iptables -t mangle --delete PREROUTING -m layer7 --l7proto unset
|
||||
|
||||
rmmod sch_htb >/dev/null 2>&1
|
||||
|
||||
|
||||
Reference in New Issue
Block a user