hello,
For me it's better if you use different marks.
I note that packets are marked correctly but in the wan interface tc
filter send them on the wrong class. is the same problem you had it?
After, where do you mark the packets (in iptables)? iptables/kernel
version?
I mark packets in iptables (mangle table PREROUTING chain):
iptables -t mangle -A PREROUTING -p TCP -m mac --mac-source
xx:xx:xx:xx:xx:xx--dport 443 -j MARK --set-mark 8
iptables version: 1.4.3.2
kernel version: 2.6.29.3
both patched to use IMQ devices.
Normally I don't use connmark because when I try some time ago to use
it, I found some "not marked" problems, so I switch to classid. Better
and cleaner for me.
what kind of problems? What do you mean with "I switch to classid" ?
thanks in advance,
Fabio
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
