--- zzzz-none-000/linux-2.6.32.61/net/netfilter/xt_DSCP.c 2013-06-10 09:43:48.000000000 +0000 +++ virian-300e-630/linux-2.6.32.61/net/netfilter/xt_DSCP.c 2013-02-12 11:29:49.000000000 +0000 @@ -99,7 +99,7 @@ u_int8_t orig, nv; orig = ipv6_get_dsfield(iph); - nv = (orig & ~info->tos_mask) ^ info->tos_value; + nv = (orig & info->tos_mask) ^ info->tos_value; if (orig != nv) { if (!skb_make_writable(skb, sizeof(struct iphdr)))