On Fri, 28 Sep 2007 19:46:26 +0200, Patrick McHardy wrote > Jan Engelhardt wrote: > > On Sep 28 2007 20:06, Kaloyan Kovachev wrote: > > > >>Hello, > >>i need to mark the connection with the realm number, but it seems there is no > >>'easy way' and there should be separate rule for each realm. > >> > >>Are there any plans to add this functionality and which is the preferable way > >>to go: > >> 1) create new REALMCONNMARK target with and/or mask > > > > > > Yeah, since there is already an xt_realm, a xt_REALM would be > > the logical counterpart. > > The realm belongs to the route, it can not be changed. > > I'm currently working on the netlink based iptables successor, > perhaps we should split matches into a "collector" part that > gathers the data and some generic range/mask/... matching. > That would allow to tell a target like CONNMARK to gather > the data from somewhere else. Great, this will also replace IPMARK, IPCLASSIFY etc with only common targets MARK, CONNMARK and CLASSIFY. It would be good to use the same sintax for match and for the mark value i.e. if the entry is a macth return true or false and if it is in the target - return the matched value. - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
