tc-xt(8) [mojave man page]

iptables action in tc(8)                                               Linux                                              iptables action in tc(8)

NAME

       xt - tc iptables action

SYNOPSIS

       tc ... action xt -j TARGET [ TARGET_OPTS ]

DESCRIPTION

       The xt action allows to call arbitrary iptables targets for packets matching the filter this action is attached to.

OPTIONS

       -j TARGET [ TARGET_OPTS ]
              Perform a jump to the given iptables target, optionally passing any target specific options in TARGET_OPTS.

EXAMPLES

       The  following  will  attach a u32 filter to the ingress qdisc matching ICMP replies and using the xt action to make the kernel yell 'PONG'
       each time:

              tc qdisc add dev eth0 ingress
              tc filter add dev eth0 parent ffff: proto ip u32 
                   match ip protocol 1 0xff 
                   match ip icmp_type 0 0xff 
                   action xt -j LOG --log-prefix PONG

SEE ALSO

       tc(8), tc-u32(8), iptables-extensions(8)

iproute2                                                            3 Mar 2016                                            iptables action in tc(8)

Firewall mark classifier in tc(8)                                      Linux                                     Firewall mark classifier in tc(8)

NAME

       fw - fwmark traffic control filter

SYNOPSIS

       tc filter ... fw [ classid CLASSID ] [ action ACTION_SPEC ]

DESCRIPTION

       the fw filter allows to classify packets based on a previously set fwmark by iptables.  If it is identical to the filter's handle, the fil-
       ter matches.  iptables allows to mark single packets with the MARK target, or whole connections using CONNMARK.  The benefit of using  this
       filter  instead of doing the heavy-lifting with tc itself is that on one hand it might be convenient to keep packet filtering and classifi-
       cation in one place, possibly having to match a packet just once, and on the other users familiar with iptables but not tc will have a less
       hard time adding QoS to their setups.

OPTIONS

       classid CLASSID
              Push matching packets to the class identified by CLASSID.

       action ACTION_SPEC
              Apply an action from the generic actions framework on matching packets.

EXAMPLES

       Take e.g. the following tc filter statement:

              tc filter add ... handle 6 fw classid 1:1

       will match if the packet's fwmark value is 6.  This is a sample iptables statement marking packets coming in on eth0:

              iptables -t mangle -A PREROUTING -i eth0 -j MARK --set-mark 6

SEE ALSO

       tc(8), iptables(8), iptables-extensions(8)

iproute2                                                            21 Oct 2015                                  Firewall mark classifier in tc(8)