Jan Engelhardt wrote: >>>How do I get MARK back to work in -t filter -- possibly without hacking in >>>xt_MARK.c? >> >>You won't, its not supposed to work in the filter table. > > > This worked in 2.6.16, where the ipt_mark_reg_v1 strucutre in xt_MARK.c did > not have a .table limiter. (It also worked in practice, i.e. packets got > marked like they should.) I do not see why this was changed. That is not true, all versions of the mark target starting in 2.4 had the same check in the checkentry function.