Hello, On Mon, Jan 6, 2014 at 6:15 PM, Patrick McHardy <kaber@xxxxxxxxx> wrote: > Well, actually the ct expression already supports connmark, as does userspace. > > #ifdef CONFIG_NF_CONNTRACK_MARK > case NFT_CT_MARK: > dest->data[0] = ct->mark; > return; > #endif Thank you very much for pointing this out. I will change my approach and add a set command in ct (similar to what was recently added to meta). Or is someone already working on this? -Kristian -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html