Re: How to use mark and connmark in one rule

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Apr 24, 2009 at 15:40:53 +0200, Gáspár Lajos wrote:
> Hi!
>
> Tino Keitel írta:
>> $ iptables -A INPUT -m mark --mark 1 -m connmark --mark 2
>> iptables v1.4.2: mark: "--mark" option may only be specified once
>>
>> Is this intended? If not, is there a way to make this work with a stock
>> iptables, or do I have to patch the source and rename one of the
>> options?
>>   
> If you want then rename one of the options...
> The problem is that both connmark and mark have a --mark option...

Yes, that's why I renamed the connmark parameter to --conmark to make
it work. But I want to be sure that I don't break something (except for
all scripts that use -m connmark --mark), or if there is a way to even
make this work without patching.

> But you may check the manual... :D --save-mark may be your friend...

Not in this case.

Regards,
Tino
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux