Marking packets: order is important?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I am analysing the script written in the ADSL-Bandwith-Management-HOWTO
I found in www.tldp.org.

It marks all the packets depending on the ports they use, for example:

iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 0:1024 \
-j MARK --set-mark 23     # Default for low port traffic 
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 20 \
-j MARK --set-mark 26     # ftp-data port, low prio

But as far as I can see, the packet that matches the second rule,
matches the first rule as well, so, I guess that when this packet is
marked by the first rule (--set-mark 23), follows the chain, sees that
it also matches the second rule and then it is marked again with the new
value(--set-mark 26). 

I would like someone to confirm this. If all this is true, the most
specific rules should be placed at the end, am I right?

Regards,

Saioa Arrizabalaga 



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux