CLASSIFY target in POSTROUTING only?
kaber at trash.net
Fri Mar 4 12:45:38 CET 2005
Peter Lenci wrote:
> Hi all
> The CLASSIFY extension can only be used in the POSTROUTING chain of the
> mangle table. Is there a technical reason for this or is it just an aid
> to prevent misconfiguration? In particular I'd like to use the CLASSIFY
> target in the PREROUTING table (in combination with ingress tcp shaping
> with the IMQ device).
The CLASSIFY target is useable in LOCAL_OUT/FORWARD/POST_ROUTING.
PRE_ROUTING is not possible because the value will be overwritten
in ip_forward(). For IMQ you could simply remove that restriction.
More information about the netfilter-devel