[LARTC] How to invert tc matches?

[LARTC] How to invert tc matches?

[Rene Bartsch]

Hi,

I want to use inverted matches with tc-filter. I tried to invert the
matches with a "!", but this doesn't seem to be the correct syntax.


The following rules don't work:

---------------------------snip-----------------------------------------

$TC filter $ACTION dev $DEV protocol ip parent 1:0 u32 match ip src
${NETWORK[$i]} !match ip dst 192.168.0.0/24 flowid 1:$(($(($i+1))*10));

------------------------------------------------------------------------

$TC filter $ACTION dev $DEV protocol ip parent 1:0 u32 match ip src
${NETWORK[$i]} match ip dst !192.168.0.0/24 flowid 1:$(($(($i+1))*10));

---------------------------snap-----------------------------------------

The rules should match all ip packets coming from networks in
192.168.0.XXX (the NETWORK[]-Array) but not match if the packets are
destinated for 192.168.0.0/24 as this is my internal network ;-)

Thanx for any hint

Rene Bartsch




_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] How to invert tc matches?

[Artūras Šlajus]

Rene Bartsch wrote:
> Hi,
> 
> I want to use inverted matches with tc-filter. I tried to invert the
> matches with a "!", but this doesn't seem to be the correct syntax.
> 
> 
> The following rules don't work:
> 
> ---------------------------snip-----------------------------------------
> 
> $TC filter $ACTION dev $DEV protocol ip parent 1:0 u32 match ip src
> ${NETWORK[$i]} !match ip dst 192.168.0.0/24 flowid 1:$(($(($i+1))*10));
use fw filter and iptables marking
or just iptables and classify target
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/