summaryrefslogtreecommitdiff
path: root/utils.c
diff options
context:
space:
mode:
authorTony Ambardar <itugrok@yahoo.com>2021-03-21 18:06:19 -0700
committerJo-Philipp Wich <jo@mein.io>2021-03-23 10:01:28 +0100
commit61db17edddb1f05e8107f0dbef6f7d060ce67483 (patch)
treeba1a55a8b3a7cdae21a4bc866ff4d10f0d5078c8 /utils.c
parent7b844f4fb361d28ffebc95bc305347d6450569f6 (diff)
downloadfirewall3-61db17edddb1f05e8107f0dbef6f7d060ce67483.tar.gz
rules: fix device and chain usage for DSCP/MARK targets
Currently, fw3 places all DSCP/MARK target rules into the PREROUTING chain, and accepts but ignores a src device. This behaviour is impractical for most common applications (e.g. QOS setup), since rules are applied to all devices and in all directions. Fix this generally by honouring src/dest device selection and placing the rules into the appropriate chain of the mangle table. This code is based on a proof of concept shared by Jo-Philipp Wich <jo@mein.io>. Fixes: 12a7cf9db1f9 ("Add support for DSCP matches and target") Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
Diffstat (limited to 'utils.c')
0 files changed, 0 insertions, 0 deletions