Hi, With iptables CONNMARK, one could something like: ... -j CONNMARK --restore-mark --nfmask 0xAA --ctmask 0x0F There seems to be no way to replicate this with nftables meta ct and mark. Attemting so use something like: meta mark set (meta & 0xffffff55) | (ct mark & 0xfffffff0) results in: > Error: Right hand side of binary operation (&) must be constant How i can replicate the restore mark with masks behavior in nft? Regards Andreas -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
