From: Arne Fitzenreiter <arne_f@ipfire.org>
Date: Thu, 1 Apr 2010 20:16:48 +0000 (+0200)
Subject: Disable qos marking for IPSec marked traffic.
X-Git-Tag: v2.9-beta1~412^2
X-Git-Url: http://git.ipfire.org/?p=people%2Fpmueller%2Fipfire-2.x.git;a=commitdiff_plain;h=5487c71bbe42254d7eb384a3dbaa6ac2061df729

Disable qos marking for IPSec marked traffic.
---

diff --git a/config/qos/makeqosscripts.pl b/config/qos/makeqosscripts.pl
index d62e6307a8..243cf85ff2 100644
--- a/config/qos/makeqosscripts.pl
+++ b/config/qos/makeqosscripts.pl
@@ -264,6 +264,9 @@ print <<END
 	iptables -t mangle -I POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-OUT
 	iptables -t mangle -A POSTROUTING -o $qossettings{'RED_DEV'} -j QOS-TOS
 
+	### Don't change mark on traffic for the ipsec tunnel
+	iptables -t mangle -A QOS-OUT -m mark --mark 50 -j RETURN
+
 	### MARK ACKs
 	iptables -t mangle -A QOS-OUT -p tcp --tcp-flags SYN,RST SYN -j TOS --set-tos 4
 	iptables -t mangle -A QOS-OUT -p tcp --tcp-flags SYN,RST SYN -j MARK --set-mark $qossettings{'ACK'}