Bug 207388 - unfamiliar behavior of "setdscp" in IPFW
Summary: unfamiliar behavior of "setdscp" in IPFW
Status: New
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: 9.2-RELEASE
Hardware: Any Any
: --- Affects Only Me
Assignee: Tom Jones
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-02-21 06:21 UTC by nazari.s11@gmail.com
Modified: 2020-09-19 16:40 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description nazari.s11@gmail.com 2016-02-21 06:21:28 UTC 
Hi
I use FreeBSD 9.2 and ipfw
IPFW rules are defined as follows.

02000 check-state
02900 skipto 3003 ip from any to any via gbeth1 out

03003 skipto 3005 ip from any to any dscp af11
03004 skipto 3007 ip from any to any
03005 setdscp af12 altq af11-gbeth1-out ip from any to any via gbeth1 out
03006 skipto 3010 ip from any to any
03007 skipto 3009 ip from any to any dscp af12
03008 skipto 3010 ip from any to any
03009 setdscp cs7 altq af12-gbeth1-out ip from any to any via gbeth1 out

 
65535 allow ip from any to any

 And packets with dscp af11 and af12  be sent to the gbeth1 interface.
Af11 packets match with Rule 3003 then change dscp value of then to  af12 in rule 3005 .
 But this packets re-match with rule 3007  and changes dscp value again in 3009 to cs7.
Thus, at the bottom of all outgoing packets from this interface are dscp cs7.