IPv6 MARK support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

  I have a problem with the MARK target support. I want to MARK locally generated IPv6 packets (UDP, TCP, ICMP ...). For this i use the following ip6tables command :

ip6tables -t mangle -A OUTPUT -p udp -j MARK 0x1
ip6tables -t mangle -A OUTPUT -p tcp -j MARK 0x2

All works fine, the rule is added in the OUPUT chain of mangle table. Now i want to retrieve this mark and route packets according to their mark :

ip -6 route add 2001:688:dd00::5 via 2001:688:bb00::5 dev eth0 table TEST1
ip -6 route add 2001:688:dd00::5 via 2001:688:cc00::5 dev eth1 table TEST2

=> Routes seems to be taken into account and added to the tables (it doesn't appear but when you type ip -6 route show table 0 | grep TEST1 you can see the rules in TEST1)

ip -6 rule add fwmark 0x1 table TEST1
ip -6 rule add fwmark 0x2 table TEST2

=> Rules are added and can be viewed with ip -6 rule show

The test bed is set up correctly (all interfaces can be pinged). 

My problem is that when i generate a UDP flow (via nc) the packets are not marked (i suppose) by ip6tables and therefore iproute does not lookup table TEST1 as it should.

My kernel is 2.6.19.3 with ip6tables compiled as module with all available targets, IPv6 multiple routing tables is built in as well as "use netfilter MARK value as routing key"

Best regards,

Maël

Envoyez vos cartes de voeux depuis www.laposte.net 
Elles seront ensuite distribuées par le facteur : pratique et malin !




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux