[LARTC] Marking and remarking of incoming traffic

[Tim Enos]

Hi Jon,

You can use iptables to mark/change the DSCP value of an incoming packet on
the ingress side. An example is below (where $in_dev can be whatever your
input interface is):

ip tables -t mangle -A FORWARD -i $in_dev -p tcp --ports 80 -j DSCP
--set-dscp-class BE

Basically the above example (re)marks all www traffic (meant to be forwarded
through this node) entering via $in_dev to BE.

There is a decent (IMO) manpage for iptables (there are too many
permutations/combinations of options to list here). 

> -----Original Message-----
> From: lartc-bounces at mailman.ds9a.nl [mailto:lartc-bounces at mailman.ds9a.nl]
> On Behalf Of Flechsenhaar, Jon J
> Sent: Monday, August 06, 2007 7:08 PM
> To: LARTC at mailman.ds9a.nl
> Subject: [LARTC] Marking and remarking of incoming traffic
> 
> I can use DSMARK to mark on the Egress side.  Is there a way to
> mark/change the DSCP value of an incoming packet on the ingress side?
> Thanks.
> 
> 
> Jon Flechsenhaar
> Boeing WNW Team
> Network Services
> (714)-762-1231
> 202-E7
> 
> _______________________________________________
> LARTC mailing list
> LARTC at mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc