Tino Keitel a écrit :
On Fri, Apr 24, 2009 at 23:39:44 +1000, Brian Austin - Standard Universal wrote:
iptables -A INPUT -m mark --mark 1
iptables -A INPUT -m connmark --mark 2
I want to match packets with both a specific nfmark _and_ a specific
connmark, so I need both matches in one rule.
Not necessarily. For example with user-defined chains :
iptables -A INPUT -m mark --mark 1 -j mark1
iptables -A mark1 -m connmark --mark 2
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html