Manpage of IPTABLES
This target allows to alter the value of the DSCP bits within the TOS header of the IPv4 packet. As this
manipulates a packet, it can only be used in the mangle table.
--set-dscp value
Set the DSCP field to a numerical value (can be decimal or hex)
--set-dscp-class class
Set the DSCP field to a DiffServ class.
ECN
This target allows to selectively work around known ECN blackholes. It can only be used in the mangle
table.
--ecn-tcp-remove
Remove all ECN bits from the TCP header. Of course, it can only be used in conjunction with -p
tcp.
DIAGNOSTICS
Various error messages are printed to standard error. The exit code is 0 for correct functioning. Errors
which appear to be caused by invalid or abused command line parameters cause an exit code of 2, and
other errors cause an exit code of 1.
BUGS
Bugs? What's this? ;-) Well... the counters are not reliable on sparc64.
COMPATIBILITY WITH IPCHAINS
This iptables is very similar to ipchains by Rusty Russell. The main difference is that the chains INPUT
and OUTPUT are only traversed for packets coming into the local host and originating from the local
host respectively. Hence every packet only passes through one of the three chains; previously a forwarded
packet would pass through all three.
http://www.iptablesrocks.org/syntax/man_iptables.htm (17 of 20) [2/13/2004 8:04:51 PM]
