On Fri, Apr 24, 2009 at 15:40:53 +0200, Gáspár Lajos wrote: > Hi! > > Tino Keitel írta: >> $ iptables -A INPUT -m mark --mark 1 -m connmark --mark 2 >> iptables v1.4.2: mark: "--mark" option may only be specified once >> >> Is this intended? If not, is there a way to make this work with a stock >> iptables, or do I have to patch the source and rename one of the >> options? >> > If you want then rename one of the options... > The problem is that both connmark and mark have a --mark option... Yes, that's why I renamed the connmark parameter to --conmark to make it work. But I want to be sure that I don't break something (except for all scripts that use -m connmark --mark), or if there is a way to even make this work without patching. > But you may check the manual... :D --save-mark may be your friend... Not in this case. Regards, Tino -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html