Hello,
I find a bug in the manpage of iptables:
The description for the value in option "-m dscp
-dscp" should be
modified to 0~63.
The option can match 6 bit DSCP field within the TOS
field in the IP
header.
So the range for the option should be 0~(2^6-1)£¬that is
0~63.
1) use "iptables -m dscp --dscp 63" :
1. iptables -A INPUT -m dscp --dscp 63
2. iptables -L INPUT | grep "DSCP match
0x3f"
I have made a patch for the manpage of the
iptables-1.3.5-1.2.1.
The content of the patch:
diff -ru iptables-1.3.5.org/extensions/libipt_dscp.man
iptables-1.3.5/extensions/libipt_dscp.man
--- iptables-1.3.5.org/extensions/libipt_dscp.man 2007-08-01
20:29:03.000000000 +0800
+++ iptables-1.3.5/extensions/libipt_dscp.man 2007-08-01
20:30:09.000000000
+0800
 -2,7
+2,7
IP header. DSCP has superseded TOS within the IETF.
.TP
.BI "--dscp " "value"
-Match against a numeric (decimal or hex) value [0-32].
+Match against a numeric (decimal or hex) value [0-63].
.TP
.BI "--dscp-class " "fIDiffServ
ClassfP"
Match the DiffServ class. This value may be any of the
Regards
Zhang Xiliang
begin 666 iptables_dscp.patch
M9&EF9B M<G4:7!T86)L97,M,2XS+C4N;W)G+V5X=&5N<VEO;G,O;&
EB:7!T
M7V1S8W
N;6%N(&EP=&%B;&5S+3$N,RXU+V5X=&5N<VEO;G,O
;&EB:7!T7V1S
M8W
N;6%N"BTM+2!I<'1A8FQE<RTQ+C,N-2YO<F<O97AT96
YS:6]N<R]L:6)I
M<'1?9'-C<"YM86X),C P-RTP."TP,2
R,#HR.3HP,RXP,# P,# P,# *S X
M,#
**RLK(&EP=&%B;&5S+3$N,RXU+V5X=&5N<VEO;G,O
;&EB:7!T7V1S8W N
M;6%N"3(P,#<M,#M,#$,C Z,S Z,#DN,# P,# P,# P("LP.#
P"D! ("TR
M+#<*S(L-R! 0 H25 :&5A9&5R+B 1%-#4"!H87,<W5P97)S961E9"!4
M3U,=VET:&EN('1H92!)151&+H+E10"B N0DD(BTM9'-C<" B(")V86QU
M92(*+4UA=&-H(&%G86EN<W082!N=6UE<FEC("AD96-I;6%L(&]R(&AE>&
quot;D
M=F%L=646S M,S)=+HK36%T8V86=A:6YS="!A(&YU;65R:6,*&1E8VEM
M86P;W(:&5X*2!V86QU92!;,"TV,UTN"B N5%
*("Y"22 B+2UD<V-P+6-L
M87-S("((EQF241I9F9397)V($-L87-S7&90(H36%T8V=&AE($1I9F93
H97)V(&-L87-S+B!4:&ES('9A;'5E(&UA>2!B92!A;GD<
img src="/img/at.gif" align="middle" border="0"
alt="">;V8=&AE"``
`
end
|
