On 12-12-21 09:14 AM, Yury Stankevich wrote:
well. let me describe whole picture i want to achieve
I think i got what you are trying to do Yury. Clever. From the description Jan provided in his response, I dont think this used to work at all. Are you saying it worked before? Having said that, what you are doing sounds so useful that we need to make it work ;-> But it appears like we need a brand new action for it, something like GetMarkFromConntrack. Jan, I am assuming (on ingress only) we need to call "something" to give us the nfct then grab the skb->mark from nfct. On egress, I am assuming the skb->mark is already set if connmark is to be used... Am i correct? If yes, then this action will only be useful at ingress. cheers, jamal -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
