Is this a bug? [root@cap-x2100m2-01 ~]# \ > iptables -A FORWARD -i eth2.11 -o eth1.111 -p tcp -m mark --mark 0x0/0xfff -m connmark --mark 0x0/0xfff -j NFQUEUE --queue-num 10 iptables v1.4.7: mark: "--mark" option may only be specified once Try `iptables -h' or 'iptables --help' for more information. [root@cap-x2100m2-01 ~]# Seems that other combinations of match extension can be combined in the same rule and if I specify the above with just -m mark or just -m connmark, it takes it just fine. Is the command line parser confusing the two different usages of --mark? If this is a bug, has it been fixed in a later version than what I have? This is from RHEL 6.0. [root@cap-x2100m2-01 ~]# iptables --version iptables v1.4.7 [root@cap-x2100m2-01 ~]# Thanks, Jeff Haran -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
