Fabio Marcone a écrit :
In a post in a forum I see this:
iptables -t mangle -A PREROUTING -m owner --pid-owner <PID of process> -
-j MARK --set-mark 2
iptables -t mangle -A PREROUTING -j IMQ --todev 0
the second rule is used? so, rule matching in mangle table is not blocking?
Whether a matching rule stops further rule examination, if this is what
you mean, depends on the target. MARK is not a terminal target. It is
not specific to the mangle table, although (most if not all)
mangle-specific targets are non terminal whereas filter and nat-specific
targets are terminal.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
