From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-oi0-x22a.google.com (mail-oi0-x22a.google.com [IPv6:2607:f8b0:4003:c06::22a]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id CE69F21F2F7 for ; Thu, 17 Jul 2014 00:45:22 -0700 (PDT) Received: by mail-oi0-f42.google.com with SMTP id a3so703553oib.1 for ; Thu, 17 Jul 2014 00:45:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=s+UfHrG5mX3YqABX2dCJwanuBix4qDbuDn0LjCfAn6c=; b=tyiRKgjbcSAHCqZYqXpSPCwLLNYwj+EZsRIYLGWFmmMQO+2j3OkWgaoXPKidtjY/PG kPkSfyDpx8/J7UZ3HXi0xLWj3mehayHOUnL8DG4EvoGkoIlrWQJ2eKR6aRHfMf6qYbS1 kNzTfYosKJVjxlN382tOjwDlFMIEqHLBg9yaCZlWxet0XU2tSIz8aP5bT34bPxhXJdaM 4kgznLFPPUFHsghD9t+lXTn+3yzpAwWAsvD26zX0WgIZbYl0aqOtTpcVuX7t4xd/sfCf ip7HFInUAELTtwoC5rwlC9d9udscSWUc5lyjhmlVqwffc3yoDntO3NY4aV2z8E3LgiO+ dBPQ== MIME-Version: 1.0 X-Received: by 10.182.65.167 with SMTP id y7mr42349584obs.29.1405583121836; Thu, 17 Jul 2014 00:45:21 -0700 (PDT) Received: by 10.202.93.195 with HTTP; Thu, 17 Jul 2014 00:45:21 -0700 (PDT) Date: Thu, 17 Jul 2014 00:45:21 -0700 Message-ID: From: Dave Taht To: "cerowrt-devel@lists.bufferbloat.net" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: [Cerowrt-devel] squashing dscp on sqm-scripts and the sqm gui X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jul 2014 07:45:23 -0000 Some take it as a given that people ignore and/or reset the dscp values on inbound access to a given domain. Well, that's largely not the case. Although the sqm system has long had support for rewriting the dscp field on ingress, and ignoring them in the shaper, it A) didn't work, and B) didn't have gui support. So I've added that to ceropackages and if all goes well, it will be in the next release. It's still a little dicy as to how this interacts with the firewall rules but I'm not in a position to test that. So I've pushed out the new scripts to ceropackages. Secondly, it apparently didn't work right on respecting the ingress dscp values either! so that's fixed also. Something that I don't think is entirely fixed is what happens to the iptables rules when you change one of these parameters and reload sqm. --=20 Dave T=C3=A4ht NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_= indecent.article