Add exempt (Internet2) ipset to *mangle.

diff --git a/planetlab-config b/planetlab-config
index c9b42a2..1ec63c2 100644 (file)
--- a/planetlab-config
+++ b/planetlab-config
@@ -1,19 +1,25 @@
-# Generated by iptables-save v1.3.8 on Wed Feb 20 17:19:51 2008
+# Generated by iptables-save v1.3.8 on Thu Jul 24 19:08:54 2008
 *filter
-:INPUT ACCEPT [1208:282502]
+:INPUT ACCEPT [372727748:339816748119]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [874:100768]
--A OUTPUT -o eth0 -j ULOG --ulog-cprange 54 --ulog-qthreshold 16 
+:OUTPUT ACCEPT [318650932:362440953533]
+:BLACKLIST - [0:0]
+:LOGDROP - [0:0]
+-A OUTPUT -j BLACKLIST
+-A OUTPUT -o eth0 -j ULOG --ulog-cprange 54 --ulog-qthreshold 16
+-A LOGDROP -j LOG
+-A LOGDROP -j DROP
 COMMIT
-# Completed on Wed Feb 20 17:19:51 2008
-# Generated by iptables-save v1.3.8 on Wed Feb 20 17:19:51 2008
+# Completed on Thu Jul 24 19:08:54 2008
+# Generated by iptables-save v1.3.8 on Thu Jul 24 19:08:54 2008
 *mangle
-:PREROUTING ACCEPT [11771:2506707]
-:INPUT ACCEPT [11769:2505789]
+:PREROUTING ACCEPT [372742859:339819883806]
+:INPUT ACCEPT [372727757:339816748587]
 :FORWARD ACCEPT [0:0]
-:OUTPUT ACCEPT [10187:1278566]
-:POSTROUTING ACCEPT [10187:1278566]
--A INPUT -j MARK --copy-xid 0x0 
--A OUTPUT -j MARK --copy-xid 0x0 
+:OUTPUT ACCEPT [318650944:362440955101]
+:POSTROUTING ACCEPT [318650944:362440955101]
+-A INPUT -i ! lo -j MARK 0x0
+-A POSTROUTING -m set --set Internet2 dst -j CLASSIFY --set-class 0001:2000
 COMMIT
-# Completed on Wed Feb 20 17:19:51 2008
+# Completed on Thu Jul 24 19:08:54 2008
+