forked from extern/shorewall_code
Allow TC experts to SAVE/RESTORE all parts of the packet mark
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
8211c5de35
commit
3bdf703522
@ -1959,13 +1959,13 @@ sub setup_tc() {
|
|||||||
if ( $config{TC_ENABLED} ) {
|
if ( $config{TC_ENABLED} ) {
|
||||||
our @tccmd = ( { match => sub ( $ ) { $_[0] eq 'SAVE' } ,
|
our @tccmd = ( { match => sub ( $ ) { $_[0] eq 'SAVE' } ,
|
||||||
target => 'CONNMARK --save-mark --mask' ,
|
target => 'CONNMARK --save-mark --mask' ,
|
||||||
mark => SMALLMARK ,
|
mark => $config{TC_EXPERT} ? HIGHMARK : SMALLMARK,
|
||||||
mask => in_hex( $globals{TC_MASK} ) ,
|
mask => in_hex( $globals{TC_MASK} ) ,
|
||||||
connmark => 1
|
connmark => 1
|
||||||
} ,
|
} ,
|
||||||
{ match => sub ( $ ) { $_[0] eq 'RESTORE' },
|
{ match => sub ( $ ) { $_[0] eq 'RESTORE' },
|
||||||
target => 'CONNMARK --restore-mark --mask' ,
|
target => 'CONNMARK --restore-mark --mask' ,
|
||||||
mark => SMALLMARK ,
|
mark => $config{TC_EXPERT} ? HIGHMARK : SMALLMARK ,
|
||||||
mask => in_hex( $globals{TC_MASK} ) ,
|
mask => in_hex( $globals{TC_MASK} ) ,
|
||||||
connmark => 1
|
connmark => 1
|
||||||
} ,
|
} ,
|
||||||
|
Loading…
Reference in New Issue
Block a user