U.Mutlu wrote, On 01/16/2015 01:59 AM:
The Media Server wrote, On 01/15/2015 11:34 PM:
Hi I can't get my PREROUTING iptables rule to mark my packets via
--set-mark on Ubuntu
iptables -t mangle -A PREROUTING -p tcp --sport 80 -j MARK --set-mark 2
rule add fwmark 2 table 2
and the above one should be
ip rule add fwmark 2 table 2
iptables -t mangle -A PREROUTING -j MARK --set-mark 2
iptables -t mangle -A INPUT -j MARK --set-mark 2
iptables -t nat -A INPUT -j MARK --set-mark 2
iptables -t nat -A PREROUTING -j MARK --set-mark 2
None of the above pass trough the table2
but this does pass trough the table 2 with this rule:
ip rule add from 192.168.2.0/24 table 2
----
Is there a problem marking packets in Ubuntu 14.04.1 LTS and iptables v1.4.21?
Have you also defined table 2 in /etc/iproute2/rt_tables ?
It must be something like:
2 mytab2
I think there is no tool for it, you have to edit the file.
later you can use
ip rule ls
ip route ls
ip route ls table 2
or alternatively
ip route ls table mytab2
and don't forget to del the wrong or excess entries there...
ip rule del fwmark 2 table 2
ip route flush table 2
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
