On Mon, Jan 06, 2014 at 07:09:58PM +0100, Kristian Evensen wrote: > Hello, > > On Mon, Jan 6, 2014 at 6:15 PM, Patrick McHardy <kaber@xxxxxxxxx> wrote: > > Well, actually the ct expression already supports connmark, as does userspace. > > > > #ifdef CONFIG_NF_CONNTRACK_MARK > > case NFT_CT_MARK: > > dest->data[0] = ct->mark; > > return; > > #endif > > Thank you very much for pointing this out. I will change my approach > and add a set command in ct (similar to what was recently added to > meta). Or is someone already working on this? Not sure what you're trying to achieve, we already support the connmark in the ct expression: nft filter output ct mark 0x1 ... -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
