On Mon, 14 Jan 2013 21:58:34 +0100 Born Without <blackhole@xxxxxxxxxxx> wrote: > > Question: is a mangle rule really an end rule as the site suggests? > > Or is this not true ("man iptables" says nothing about it AFAICS). > > Or is it true and do I have to report a bug? > > That depends if the target is a "non-terminating target" or not. > i.e > MARK, CONNMARK, LOG are non-terminating. > ACCEPT, DROP, RETURN are. Ok, this is unfortunately not mentioned in "man iptables", only for LOG and ULOG and not for CONNMARK and MARK. But anyway, the conclusion may be: what the website says is wrong. R. -- ___________________________________________________________________ It is better to remain silent and be thought a fool, than to speak aloud and remove all doubt. +------------------------------------------------------------------+ | Richard Lucassen, Utrecht | | Public key and email address: | | http://www.lucassen.org/mail-pubkey.html | +------------------------------------------------------------------+ -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html