Re: text "ERROR" shown by "fireqos status" for first class in class group

Phil Whineray <[email protected]>
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <[email protected]>
On Thu, Apr 23, 2015 at 09:11:11AM +0200, Phineas Gage wrote:
> I started trying to digest your bridging documentation but that’s going to
> take more time, so I’ll give it another go later. I see it’s rather
> complicated, so that suggests that even though the bridge config I have
> is working, there may be some surprises in behavior I’m not aware of,
> so look forward to getting my head around it.

If you are using physin/physout on pairs of ports within a single
bridge everything should just work and the flags added to silence
the syslog warnings are not a problem.

If you use them on any other combination of network devices then
I believe the new flags instruct netfilter to drop the packets
before the physout match is done, which is why the warning is no
longer emitted. It also means nothing matches even if it seems it
should based on the values in the config.

What I didn't check (but will this weekend) is whether when the original
syslog warning flag is emitted, the check is ignored (similar to my
proposal) or whether physout just never matches (same behaviour as
new flags).
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.