SHOREWALL-TCFILTERS(5)SHOREWALL-TCFILTERS(5)NAME
tcfilters - Shorewall u32 classifier rules file
SYNOPSIS
/etc/shorewall/tcfilters
DESCRIPTION
Entries in this file cause packets to be classified for traffic
shaping.
The columns in the file are as follows.
CLASS - interface:class
The name or number of an interface defined in
shorewall-tcdevices[1](5) followed by a class number defined for
that interface in shorewall-tcclasses[2](5).
SOURCE - {-|address}
Source of the packet. May be a host or network address. DNS names
are not allowed.
DEST - {-|address}}
Destination of the packet. Comma separated list of IP addresses
and/or subnets. If your kernel and iptables include iprange match
support, IP address ranges are also allowed. List elements may also
consist of an interface name followed by ":" and an address (e.g.,
eth1:192.168.1.0/24). If the MARK column specificies a
classification of the form major:minor then this column may also
contain an interface name.
You may exclude certain hosts from the set already defined through
use of an exclusion (see shorewall-exclusion[3](5)).
PROTO - {-|protocol-number|protocol-name|all}
Protocol.
DEST PORT (Optional) - [-|port-name-or-number]
Destination Ports. A Port name (from services(5)) or a port number;
if the protocol is icmp, this column is interpreted as the
destination icmp-type(s).
SOURCE PORT (Optional) - [-|port-name-or-number]
Source port.
EXAMPLE
Example 1:
Place all ICMP echo traffic on interface 1 in class 10.
#CLASS SOURCE DEST PROTO DEST
# PORT
1:10 0.0.0.0/0 0.0.0.0/0 icmp echo-request
1:10 0.0.0.0/0 0.0.0.0/0 icmp echo-reply
FILES
/etc/shorewall/tcfilters
SEE ALSO
http://shorewall.net/traffic_shaping.htm
http://shorewall.net/MultiISP.html
http://shorewall.net/PacketMarking.html
shorewall(8), shorewall-accounting(5), shorewall-actions(5),
shorewall-blacklist(5), shorewall-ecn(5), shorewall-exclusion(5),
shorewall-hosts(5), shorewall-interfaces(5), shorewall-ipsec(5),
shorewall-maclist(5), shorewall-masq(5), shorewall-nat(5),
shorewall-netmap(5), shorewall-params(5), shorewall-policy(5),
shorewall-providers(5), shorewall-proxyarp(5),
shorewall-route_rules(5), shorewall-routestopped(5),
shorewall-rules(5), shorewall.conf(5), shorewall-tcclasses(5),
shorewall-tcdevices(5), shorewall-tos(5), shorewall-tunnels(5),
shorewall-zones(5)NOTES
1. shorewall-tcdevices
shorewall-tcdevices.html
2. shorewall-tcclasses
shorewall-tcclasses.html
3. shorewall-exclusion
shorewall-exclusion.html
09/05/2009 SHOREWALL-TCFILTERS(5)
