--- zzzz-none-000/linux-2.6.32.60/net/netfilter/xt_DSCP.c 2012-10-07 21:41:24.000000000 +0000 +++ ur8-7270-606/linux-2.6.32.60/net/netfilter/xt_DSCP.c 2013-02-12 11:29:49.000000000 +0000 @@ -99,7 +99,7 @@ u_int8_t orig, nv; orig = ipv6_get_dsfield(iph); - nv = (orig & ~info->tos_mask) ^ info->tos_value; + nv = (orig & info->tos_mask) ^ info->tos_value; if (orig != nv) { if (!skb_make_writable(skb, sizeof(struct iphdr)))