[strongSwan] Problem About Dscp Support in scenario of "end to end" tunnel

[Tobias Brunner]

Hi David,

> iptables -t mangle -A OUTPUT -p icmp -j DSCP --set-dscp 10
> iptables -t mangle -A OUTPUT -p icmp -m dscp --dscp 10 -j MARK --set-mark 10

If you add these rules on both sides.  Then you also have to specify 
mark=10 in both configs.  You seem to have done so on the gateway but 
not on the client.

Regards,
Tobias