marking all h323 packets with some TOS

DISCUSSION Upma Gandhi 3 participants 4 messages Jan 9, 2003

lore

Share & tools

lore

Upma Gandhi

author

2003-01-09 08:13 UTC #0 lore raw

Hello All,
I have a following setup

Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24)

lets supopose eth0 is LAN side Interface and
eth1 is WAN side interface.

what I want to do is "Mark all h323 packets with some tos value". for which my iptables command seems to be like this-

     iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m

rtp -j FTOS --set-ftos 0xb8.

but it's giving an error message -
iptable: No chain/target/match by tha rule.

Can anybody help me out.

Thanks & Regards
Upma

Raymond Leach

2003-01-09 08:44 UTC #1 lore raw

Sounds like it doesn't understand the -j FTOS. Maybe a missing module or not compiled into the kernel?

Quoted 21 lines · Upma Gandhi

Hello All,
I have a following setup
Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24)
lets supopose eth0 is LAN side Interface and
eth1 is WAN side interface.
what I want to do is "Mark all h323 packets with some tos value". for which my iptables command seems to be like this-
     iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m
rtp -j FTOS --set-ftos 0xb8.
but it's giving an error message -
iptable: No chain/target/match by tha rule.
Can anybody help me out.
Thanks & Regards
Upma

Signature · 19 lines

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
(  Raymond Leach                       )
 ) Knowledge Factory                  (
(                                      )
 ) Tel: +27 11 445 8100               (
(  Fax: +27 11 445 8101                )
 )                                    (
(  http://www.knowledgefactory.co.za/  )
 ) http://www.saptg.co.za/            (
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   o                                o
    o                              o
        .--.                  .--.
       | o_o|                |o_o |
       | \_:|                |:_/ |
      / /   \\              //   \ \
     ( |     |)            (|     | )
     /`\_   _/'\          /'\_   _/`\
     \___)=(___/          \___)=(___/

Hello Raymond,
Thanks for your help.
Modules are not missing and they are compiled also.
But one doubt , in ip_conntarck_in function of ip_conntrack_core.c file.
When it lokks for ct-helper, it's address is 0, means that helper are
not register.
But I've compiled h323& rtc helper, as I'm very new to
iptables/netfilter, I don't have any idea what does this means ?

Regards
Upma

Quoted 50 lines · Raymond Leach

Sounds like it doesn't understand the -j FTOS. Maybe a missing module or not compiled into the kernel?
Quoted 13 lines · Upma Gandhi
Hello All,
I have a following setup
Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24)
lets supopose eth0 is LAN side Interface and
eth1 is WAN side interface.
what I want to do is "Mark all h323 packets with some tos value". for which my iptables command seems to be like this-
     iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m
rtp -j FTOS --set-ftos 0xb8.
Quoted 8 lines
but it's giving an error message -
iptable: No chain/target/match by tha rule.
Can anybody help me out.
Thanks & Regards
Upma
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
( Raymond Leach )
) Knowledge Factory (
( )
) Tel: +27 11 445 8100 (
( Fax: +27 11 445 8101 )
) (
( http://www.knowledgefactory.co.za/ )
) http://www.saptg.co.za/ (
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
o o
    o                              o
        .--.                  .--.
       | o_o|                |o_o |
       | \_:|                |:_/ |
      / /   \\              //   \ \
     ( |     |)            (|     | )
     /`\_   _/'\          /'\_   _/`\
     \___)=(___/          \___)=(___/
------------------------------------------------------------------------
Name: signature.asc
signature.asc Type: application/pgp-signature
Description: This is a digitally signed message part

Ranjeet Shetye

2003-01-09 04:37 UTC #3 lore raw

Are the modules loaded into the kernel ? run an lsmod and make sure that the modules are loaded.

Otherwise you will need to use insmod or modprobe to load the modules into the kernel

you might want to do this in some startup script so that the modules are loaded on bootup.

Ranjeet Shetye.

Quoted 66 lines · Upma Gandhi

Hello Raymond,
Thanks for your help.
Modules are not missing and they are compiled also.
But one doubt , in ip_conntarck_in function of ip_conntrack_core.c file.
When it lokks for ct-helper, it's address is 0, means that helper are
not register.
But I've compiled h323& rtc helper, as I'm very new to
iptables/netfilter, I don't have any idea what does this means ?
Regards
Upma
Quoted 50 lines · Raymond Leach
Sounds like it doesn't understand the -j FTOS. Maybe a missing module or not compiled into the kernel?
Quoted 13 lines · Upma Gandhi
Hello All,
I have a following setup
Internet <-> Router with netfilter configure <-> LAN(192.9.201.0/24)
lets supopose eth0 is LAN side Interface and
eth1 is WAN side interface.
what I want to do is "Mark all h323 packets with some tos value". for which my iptables command seems to be like this-
     iptables -t mangle -A FORWARD -o eth0 -d 192.9.201.0/24 -p tcp -m
rtp -j FTOS --set-ftos 0xb8.
Quoted 8 lines
but it's giving an error message -
iptable: No chain/target/match by tha rule.
Can anybody help me out.
Thanks & Regards
Upma
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
( Raymond Leach )
) Knowledge Factory (
( )
) Tel: +27 11 445 8100 (
( Fax: +27 11 445 8101 )
) (
( http://www.knowledgefactory.co.za/ )
) http://www.saptg.co.za/ (
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
o o
    o                              o
        .--.                  .--.
       | o_o|                |o_o |
       | \_:|                |:_/ |
      / /   \\              //   \ \
     ( |     |)            (|     | )
     /`\_   _/'\          /'\_   _/`\
     \___)=(___/          \___)=(___/
------------------------------------------------------------------------
Name: signature.asc
signature.asc Type: application/pgp-signature
Description: This is a digitally signed message part