Bug in manpage or ECN target
A message that is not in the archive (sent off-list or not yet received): [email protected]
Quoted 11 lines · Michael Zieger
Hi,
I just found in the man page the "ECN" target, which should allow to drop ECN flags. I tried this simple rule:
iptables -A OUTPUT -o eth0 -p tcp -j ECN --ecn-tcp-remove
But the error is: "iptables: Invalid argument"
What is wrong there? Or is it a bug in the ECN target? I use the latest iptables v1.2.7a.
You cannot use the ECN target from the filter table. You have to use it from the 'mangle' table. Packet filtering is done in 'filter', packet modification in 'mangle'.
Quoted 3 lines
BTW, there is also a typo bug in
libipt_ECN.cline 112, it should be:
"ECN target: Parameter --ecn-tcp-remove is required");
but you wrote "--ecn-remove"...
Thanks, I will correct this before the iptables-1.2.8 release.
Quoted 1 line
regards, zmi
Signature · 5 lines
Live long and prosper - Harald Welte / [email protected] http://www.gnumonks.org/ ============================================================================ GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M- V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)