Bug 207388

Summary: unfamiliar behavior of "setdscp" in IPFW
Product: Base System Reporter: nazari.s11 <nazari.s11>
Component: kernAssignee: Tom Jones <thj>
Status: New ---    
Severity: Affects Only Me CC: thj
Priority: ---    
Version: 9.2-RELEASE   
Hardware: Any   
OS: Any   

Description nazari.s11@gmail.com 2016-02-21 06:21:28 UTC 
Hi
I use FreeBSD 9.2 and ipfw
IPFW rules are defined as follows.

02000 check-state
02900 skipto 3003 ip from any to any via gbeth1 out

03003 skipto 3005 ip from any to any dscp af11
03004 skipto 3007 ip from any to any
03005 setdscp af12 altq af11-gbeth1-out ip from any to any via gbeth1 out
03006 skipto 3010 ip from any to any
03007 skipto 3009 ip from any to any dscp af12
03008 skipto 3010 ip from any to any
03009 setdscp cs7 altq af12-gbeth1-out ip from any to any via gbeth1 out

 
65535 allow ip from any to any

 And packets with dscp af11 and af12  be sent to the gbeth1 interface.
Af11 packets match with Rule 3003 then change dscp value of then to  af12 in rule 3005 .
 But this packets re-match with rule 3007  and changes dscp value again in 3009 to cs7.
Thus, at the bottom of all outgoing packets from this interface are dscp cs7.