From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: [PATCH] QoS: Do no classify as default when L7 filter isn't done Date: Tue, 22 Oct 2019 17:48:14 +0200 Message-ID: <20191022154814.10388-1-michael.tremer@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2350021093863758978==" List-Id: --===============2350021093863758978== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable We need to allow some more packets to pass through the mangle chains so that the layer 7 filter can determine what protocol it finds. If L7 filter decides that a connection is of type "unknown", we mark it as default, or it is marked with the correct class. Signed-off-by: Michael Tremer --- config/qos/makeqosscripts.pl | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/config/qos/makeqosscripts.pl b/config/qos/makeqosscripts.pl index 1a5d01d52..cbbbf70f8 100644 --- a/config/qos/makeqosscripts.pl +++ b/config/qos/makeqosscripts.pl @@ -205,9 +205,6 @@ foreach $classentry (sort @classes) } print </dev/null 2>&1 iptables -t mangle --flush QOS-INC >/dev/null 2>&1 iptables -t mangle --delete-chain QOS-INC >/dev/null 2>&1 - # remove l7-filter - iptables -t mangle --delete PREROUTING -m layer7 --l7proto unset =20 rmmod sch_htb >/dev/null 2>&1 =20 --=20 2.12.2 --===============2350021093863758978==--