In kernel config I changed CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=y
to CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=m
. In short I installed that module separately rather within the kernel itself. Now it doesn't say,
iptables v1.6.2: Couldn't load match `hashlimit':No such file or directory
Instead I get this,
root@OpenWrt:~# iptables -t mangle -A POSTROUTING -p udp -m hashlimit --hashlimi
t-name udp_high_prio --hashlimit-above 115/sec --hashlimit-burst 50 --hashlimit-
mode srcip,srcport,dstip,dstport -j CONNMARK --set-mark 0x55 -m comment --commen
t "connmark for udp"
iptables: Result not representable.
Also, what is this file /etc/iproute2/rt_dsfield
for? I checked on wireshark & DSCP packets are working without this.