Differences between -j MARK and -j CONNMARK

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi list,

What`s the differences between these two groups of rules.?????
In the first i use MARK --set-mark to mark packets and in the other i use CONNMARK --set-mark

1.
    # iptables -I POSTROUTING -t mangle -j CONNMARK --restore-mark
    # iptables -I POSTROUTING -t mangle -m mark ! --mark 0 -j ACCEPT
    # iptables -I POSTROUTING -t mangle -m ipp2p --ipp2p -j MARK --set-mark 30
    # iptables -I POSTROUTING -t mangle -m ipp2p --bit -j MARK --set-mark 30
    # iptables -I POSTROUTING -t mangle -j CONNMARK --save-mark

2.
    # iptables -I POSTROUTING -t mangle -j CONNMARK --restore-mark
    # iptables -I POSTROUTING -t mangle -m mark ! --mark 0 -j ACCEPT
    # iptables -I POSTROUTING -t mangle -m ipp2p --ipp2p -j CONNMARK --set-mark 30
    # iptables -I POSTROUTING -t mangle -m ipp2p --bit -j CONNMARK --set-mark 30
    # iptables -I POSTROUTING -t mangle -j CONNMARK --save-mark


Regards.
Thanks


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux