Gargoyle Forum

Thanks for doing all that research. I will look into compiling my own release based on the changes you've suggested. In the meantime, before my next router upgrade, I'll just use packets or come up with another way to filter those connections that doesn't involve connection_bytes.

Thanks again!

I used the iptables target REPLACE on one of the rules, after trying unsuccessfully to change them all at once: root@OpenWRT - Gargoyle:~# iptables -t mangle -R qos_egress 38 -d 50.93.246.0/23 -p tcp -m tcp --dport 443 -m connbytes --connbytes 1048576: 1099511627775 --connbytes-mode bytes --connbyte...

Thanks for taking a look. It looks like the connbytes option for the relevant entry in the iptables chain qos_egress has a from:to that is limited from 1M to 4GB (1048576:4294967295 bytes). This also applies to the qos_ingress chain. iptables -vnL -t mangle output before reaching 4 GB: Chain PREROUT...

Router is DIR-825, rev B1 ------------------------------------------------------------------ | _____ _ | | | __ \ | | | | | | \/ __ _ _ __ __ _ ___ _ _| | ___ | | | | __ / _` | '__/ _` |/ _ \| | | | |/ _ \ | | | |_\ \ (_| | | | (_| | (_) | |_| | | __/ | | \____/\__,_|_| \__, |\___/ \__, |_|\___| | |...