Classiffier : Ipchains and fw

• Use Ipchains to tag packets -m

  • input, forwarding and output chains

• use fw classifier (based on tag):

  • for ingress policing (input chain)
  • on the egress if routing (input, forwarding, output)
    • classification + policing