<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.6944.0">
<TITLE>Iptables command help</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<BR>
<P><FONT SIZE=2 FACE="Arial">Hi,</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Running </FONT>
<BR><FONT SIZE=2 FACE="Arial">FC2 </FONT>
<BR><FONT SIZE=2 FACE="Arial">Iptables 1.2.9</FONT>
<BR><FONT SIZE=2 FACE="Arial">Firehol 1.191</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I am trying to run some iptables commands in the firehol.conf file but when I do a "iptables -L" the commands I inserted aren't listed anywhere "sort of"</FONT></P>
<P><FONT SIZE=2 FACE="Arial">When I do a </FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -N TS </FONT>
<BR><FONT SIZE=2 FACE="Arial">Is says chain already exists, when I do a</FONT>
<BR><FONT SIZE=2 FACE="Arial">Iptables -L TS</FONT>
<BR><FONT SIZE=2 FACE="Arial">It says the chain does not exists</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I am trying to make sure the Mark and TS lines are inserted correctly. (Trying to do some bandwidth throttling for some users by marking certain parkets, still learning how to do it, open to suggestions :-) )</FONT></P>
<P><FONT SIZE=2 FACE="Arial">My iptables commands in the firehol.conf are as follows….</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Don't worry about the net ip addresses listed, they are global game servers anyway :-)...</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">------------------------------------------------------</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"># Mark certain traffic for routing</FONT>
<BR><FONT SIZE=2 FACE="Arial"># Uploading Set Mark 3</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A FORWARD -s 192.168.2.0/24 -j MARK --set-mark 3</FONT>
<BR><FONT SIZE=2 FACE="Arial"># Downloading Set Mark 4</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A POSTROUTING -s 0/0 -d 192.168.2.0/24 -j MARK --set-mark 4</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A POSTROUTING -s 144.135.23.52 -d 192.168.2.0/24 -j MARK --set-mark 5</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"># Tos/Qos priority settings</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -N TS</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -p tcp --dport 80 -j RETURN</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -p tcp --dport 80 -j TOS --set-tos Minimize-Delay</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -p tcp --sport 80 -j RETURN</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -p tcp --sport 80 -j TOS --set-tos Minimize-Delay</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -p tcp --dport 20000:20200 -j RETURN</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -p tcp --dport 20000:20200 -j TOS --set-tos Maximize-Throughput</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -p tcp --sport 20000:20200 -j RETURN</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -p tcp --sport 20000:20200 -j TOS --set-tos Maximize-Throughput</FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A TS -j TOS --set-tos Minimize-Cost </FONT>
<BR><FONT SIZE=2 FACE="Arial">iptables -t mangle -A PREROUTING -j TS</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">-------------------------------------------------------------</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Any help would be very much appreciated.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">James</FONT>
</P>
</BODY>
</HTML>