1Firewall mark classifier in tc(8)    Linux   Firewall mark classifier in tc(8)
2
3
4

NAME

6       fw - fwmark traffic control filter
7

SYNOPSIS

9       tc filter ... fw [ classid CLASSID ] [ action ACTION_SPEC ]
10

DESCRIPTION

12       the  fw filter allows one to classify packets based on a previously set
13       fwmark by iptables.  If it is identical to  the  filter's  handle,  the
14       filter  matches.   iptables  allows one to mark single packets with the
15       MARK target, or whole connections using CONNMARK.  The benefit of using
16       this  filter  instead of doing the heavy-lifting with tc itself is that
17       on one hand it might be convenient to keep packet filtering and classi‐
18       fication in one place, possibly having to match a packet just once, and
19       on the other users familiar with iptables but not tc will have  a  less
20       hard time adding QoS to their setups.
21

OPTIONS

23       classid CLASSID
24              Push matching packets to the class identified by CLASSID.
25
26       action ACTION_SPEC
27              Apply  an  action from the generic actions framework on matching
28              packets.
29

EXAMPLES

31       Take e.g. the following tc filter statement:
32
33              tc filter add ... handle 6 fw classid 1:1
34
35       will match if the packet's fwmark value is 6.  This is a  sample  ipta‐
36       bles statement marking packets coming in on eth0:
37
38              iptables -t mangle -A PREROUTING -i eth0 -j MARK --set-mark 6
39

SEE ALSO

41       tc(8), iptables(8), iptables-extensions(8)
42
43
44
45iproute2                          21 Oct 2015Firewall mark classifier in tc(8)
Impressum