On Sun, 30 Mar 2008 13:03:09 +0200, "Steffen Heil" <lists@xxxxxxxxxxxxxxx> wrote: > Hi Hi, > I want every reply packet belonging to every connection made through tun1 > to > be send back through tun1 (not being the default gateway tough). > (tun1 is P-t-P, so there is no routing nessessary.) > > I tried the following: > > # iptables -t mangle -A PREROUTING -i tun1 -p tcp --syn -j CONNMARK > --set-mark 71 > # iptables -t mangle -A OUTPUT -p tcp -m connmark --mark 71 -j MARK > --set-mark 71 What about using the nat table to add your mark on a whole connection instead of using the mangle table ? [...] No idea about that :p! --- Franck Joncourt http://www.debian.org/ - http://smhteam.info/wiki/ -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
