---
name: "shorewall-tos"
section: "5"
platform: "linux"
package: "shorewall"
version: "4.6.4.3-2"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/shorewall-tos"
---

# shorewall-tos(5)

Shorewall Type of Service rules file

## NAME

tos - Shorewall Type of Service rules file

## SYNOPSIS

**/etc/shorewall/tos**

## DESCRIPTION

This file defines rules for setting Type Of Service (TOS). Its use is deprecated, beginning in Shorewall 4.5.1, in favor of the TOS target in **shorewall-mangle**\[1\] (5).

The columns in the file are as follows (where the column name is followed by a different name in parentheses, the different name is used in the alternate specification syntax).

**SOURCE** - {**all**\|*address*\]\|**all**:*address*\|**$FW**}

If **all**, may optionally be followed by ":" and an IP address, a MAC address, a subnet specification or the name of an interface.

Example: all:192.168.2.3

MAC addresses must be prefixed with "~" and use "-" as a separator.

Example: ~00-A0-C9-15-39-78

**DEST** - {**all**\|*address*\]\|**all**:*address*}

Example: 192.168.2.3

**PROTOCOL** (proto) - *proto-name-or-number*

Protocol name or number.

**SOURCE PORT(S)** (sport) - {-\|*port*\|*lowport***:***highport*}

Source port or port range. If all ports, use "-".

**DEST PORT(S)** (dport) - {-\|*port*\|*lowport***:***highport*}

Destination port or port range. If all ports, use "-"

**TOS** - *tos*

Must may one of the following;

```
        tos-minimize-delay (16)
        tos-maximize-throughput (8)
        tos-maximize-reliability (4)
        tos-minimize-cost (2)
        tos-normal-service (0)
```

To specify more than one flag, add their values together and specify the numeric result.

**MARK** - \[**!**\]*value*\[/*mask*\]\[**:C**\]

If you don't want to define a test but need to specify anything in the following columns, place a "-" in this field.

!

Inverts the test (not equal)

*value*

Value of the packet or connection mark.

*mask*

A mask to be applied to the mark before testing.

**:C**

Designates a connection mark. If omitted, the packet mark's value is tested.

## FILES

/etc/shorewall/tos

## SEE ALSO

**http://www.shorewall.net/configuration\_file\_basics.htm#Pairs**\[2\]

[shorewall(8)](/shorewall/8.md), [shorewall-accounting(5)](/shorewall-accounting/5.md), [shorewall-actions(5)](/shorewall-actions/5.md), [shorewall-blacklist(5)](/shorewall-blacklist/5.md), [shorewall-hosts(5)](/shorewall-hosts/5.md), shorewall\_interfaces(5), [shorewall-ipsets(5)](/shorewall-ipsets/5.md), [shorewall-maclist(5)](/shorewall-maclist/5.md), [shorewall-masq(5)](/shorewall-masq/5.md), [shorewall-nat(5)](/shorewall-nat/5.md), [shorewall-netmap(5)](/shorewall-netmap/5.md), [shorewall-params(5)](/shorewall-params/5.md), [shorewall-policy(5)](/shorewall-policy/5.md), [shorewall-providers(5)](/shorewall-providers/5.md), [shorewall-proxyarp(5)](/shorewall-proxyarp/5.md), [shorewall-rtrules(5)](/shorewall-rtrules/5.md), [shorewall-routestopped(5)](/shorewall-routestopped/5.md), [shorewall-rules(5)](/shorewall-rules/5.md), [shorewall.conf(5)](/shorewall.conf/5.md), [shorewall-secmarks(5)](/shorewall-secmarks/5.md), [shorewall-tcclasses(5)](/shorewall-tcclasses/5.md), [shorewall-tcdevices(5)](/shorewall-tcdevices/5.md), [shorewall-mangle(5)](/shorewall-mangle/5.md), [shorewall-tunnels(5)](/shorewall-tunnels/5.md), [shorewall-zones(5)](/shorewall-zones/5.md)

## NOTES

- 1\.

  shorewall-mangle

  http://www.shorewall.net/manpages/shorewall-mangle.html

- 2\.

  http://www.shorewall.net/configuration\_file\_basics.htm#Pairs

  http://www.shorewall.net/configuration\_file\_basics.htm#Pairs