On Mon, Jan 06, 2014 at 08:25:39PM +0100, Kristian Evensen wrote: > On Mon, Jan 6, 2014 at 7:19 PM, Patrick McHardy <kaber@xxxxxxxxx> wrote: > > > > Not sure what you're trying to achieve, we already support the connmark > > in the ct expression: > > > > nft filter output ct mark 0x1 ... > > What I want to achieve is to have functionality similar to connmark > --save-mark, so that we can also set the connmark. I see. We need a meta statement for this in userspace and corresponding support for the kernel. I thought we'd had an example how to do this in the meta expression, but apparently this is wrong. I'll add it for the meta expression during the next days so you have a reference. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html