From 3bdf703522bd7401a39637686b6447852ee917a1 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Mon, 23 Apr 2012 09:00:32 -0700 Subject: [PATCH] Allow TC experts to SAVE/RESTORE all parts of the packet mark Signed-off-by: Tom Eastep --- Shorewall/Perl/Shorewall/Tc.pm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Shorewall/Perl/Shorewall/Tc.pm b/Shorewall/Perl/Shorewall/Tc.pm index a46b450ca..b4250e012 100644 --- a/Shorewall/Perl/Shorewall/Tc.pm +++ b/Shorewall/Perl/Shorewall/Tc.pm @@ -1959,13 +1959,13 @@ sub setup_tc() { if ( $config{TC_ENABLED} ) { our @tccmd = ( { match => sub ( $ ) { $_[0] eq 'SAVE' } , target => 'CONNMARK --save-mark --mask' , - mark => SMALLMARK , + mark => $config{TC_EXPERT} ? HIGHMARK : SMALLMARK, mask => in_hex( $globals{TC_MASK} ) , connmark => 1 } , { match => sub ( $ ) { $_[0] eq 'RESTORE' }, target => 'CONNMARK --restore-mark --mask' , - mark => SMALLMARK , + mark => $config{TC_EXPERT} ? HIGHMARK : SMALLMARK , mask => in_hex( $globals{TC_MASK} ) , connmark => 1 } ,