Blame extensions/libxt_TOS.man

Packit Service d1fe03
This module sets the Type of Service field in the IPv4 header (including the
Packit Service d1fe03
"precedence" bits) or the Priority field in the IPv6 header. Note that TOS
Packit Service d1fe03
shares the same bits as DSCP and ECN. The TOS target is only valid in the
Packit Service d1fe03
\fBmangle\fP table.
Packit Service d1fe03
.TP
Packit Service d1fe03
\fB\-\-set\-tos\fP \fIvalue\fP[\fB/\fP\fImask\fP]
Packit Service d1fe03
Zeroes out the bits given by \fImask\fP (see NOTE below) and XORs \fIvalue\fP
Packit Service d1fe03
into the TOS/Priority field. If \fImask\fP is omitted, 0xFF is assumed.
Packit Service d1fe03
.TP
Packit Service d1fe03
\fB\-\-set\-tos\fP \fIsymbol\fP
Packit Service d1fe03
You can specify a symbolic name when using the TOS target for IPv4. It implies
Packit Service d1fe03
a mask of 0xFF (see NOTE below). The list of recognized TOS names can be
Packit Service d1fe03
obtained by calling iptables with \fB\-j TOS \-h\fP.
Packit Service d1fe03
.PP
Packit Service d1fe03
The following mnemonics are available:
Packit Service d1fe03
.TP
Packit Service d1fe03
\fB\-\-and\-tos\fP \fIbits\fP
Packit Service d1fe03
Binary AND the TOS value with \fIbits\fP. (Mnemonic for \fB\-\-set\-tos
Packit Service d1fe03
0/\fP\fIinvbits\fP, where \fIinvbits\fP is the binary negation of \fIbits\fP.
Packit Service d1fe03
See NOTE below.)
Packit Service d1fe03
.TP
Packit Service d1fe03
\fB\-\-or\-tos\fP \fIbits\fP
Packit Service d1fe03
Binary OR the TOS value with \fIbits\fP. (Mnemonic for \fB\-\-set\-tos\fP
Packit Service d1fe03
\fIbits\fP\fB/\fP\fIbits\fP. See NOTE below.)
Packit Service d1fe03
.TP
Packit Service d1fe03
\fB\-\-xor\-tos\fP \fIbits\fP
Packit Service d1fe03
Binary XOR the TOS value with \fIbits\fP. (Mnemonic for \fB\-\-set\-tos\fP
Packit Service d1fe03
\fIbits\fP\fB/0\fP. See NOTE below.)
Packit Service d1fe03
.PP
Packit Service d1fe03
NOTE: In Linux kernels up to and including 2.6.38, with the exception of
Packit Service d1fe03
longterm releases 2.6.32 (>=.42), 2.6.33 (>=.15), and 2.6.35 (>=.14), there is
Packit Service d1fe03
a bug whereby IPv6 TOS mangling does not behave as documented and differs from
Packit Service d1fe03
the IPv4 version. The TOS mask indicates the bits one wants to zero out, so it
Packit Service d1fe03
needs to be inverted before applying it to the original TOS field. However, the
Packit Service d1fe03
aformentioned kernels forgo the inversion which breaks --set-tos and its
Packit Service d1fe03
mnemonics.