The columns in the file are as follows.

SOURCE - {all|address]|all:address|$FW}

If all, may optionally be followed by ":" and an IP address, a MAC address, a subnet specification or the name of an interface.

Example: all:2002:ce7c::92b4:1::2

MAC addresses must be prefixed with "~" and use "-" as a separator.

Example: ~00-A0-C9-15-39-78

DEST - {all|address]|all:address}

Example: 2002:ce7c::92b4:1::2

PROTOCOL - proto-name-or-number

Protocol name or number.

SOURCE PORT(S) - {-|port|lowport:highport}

Source port or port range. If all ports, use "-".

DEST PORT(S) - {-|port|lowport:highport}

Destination port or port range. If all ports, use "-"

TOS - tos

Must be one of the following;

        tos-minimize-delay (16)
        tos-maximize-throughput (8)
        tos-maximize-reliability (4)
        tos-minimize-cost (2)
        tos-normal-service (0)

To specify more than one flag, add their values together and specify the numeric result.

MARK - [!]value[/mask][:C]

If you don't want to define a test but need to specify anything in the following columns, place a "-" in this field.

!

Inverts the test (not equal)

value

Value of the packet or connection mark.

mask

A mask to be applied to the mark before testing.

:C

Designates a connection mark. If omitted, the packet mark's value is tested.

FILES

/etc/shorewall6/tos

SEE ALSO

m[blue]http://shorewall.net/configuration_file_basics.htm#Pairsm[]

shorewall6(8), shorewall6-accounting(5), shorewall6-actions(5), shorewall6-blacklist(5), shorewall6-hosts(5), shorewall6-interfaces(5), shorewall6-maclist(5), shorewall6-netmap(5),shorewall6-params(5), shorewall6-policy(5), shorewall6-providers(5), shorewall6-rtrules(5), shorewall6-routestopped(5), shorewall6-rules(5), shorewall6.conf(5), shorewall6-secmarks(5), shorewall6-tcclasses(5), shorewall6-tcdevices(5), shorewall6-tcrules(5), shorewall6-tunnels(5), shorewall6-zones(5)

NOTES

1.

shorewall6-tcrules

http://www.shorewall.netshorewall6-tcrules.html