Marking frames with ebtables for iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

I'am new to ebtables/iptables. I struggle with the mark feature. 

I try to mark some frames with ebtables on MAC Layer to pass these mark to 
iptables network layer.

I build up a bridge interface br0, cleared all ebtables and iptables tables 
as preparation. Then I try something like this:   

ebtables -t filter -A INPUT -p IPv4 -s 00:11:22:33:44:55 -i eth0 -j mark --
mark-set 0xffff --mark-target ACCEPT
ebtables -t filter -A INPUT --log-level info --log-ip --log-prefix EBFW
iptables -t mangle -A PREROUTING -m mark --mark 0xffff
iptables -t mangle -A PREROUTING -m mark --mark 0xffff -j LOG --log-level 
info --log-prefix MARKED


i would expect that iptables log show me the marked packages from ebtables. 
But i see no mark 0xffff

Does anyone know how this is done right?

Best regards,

Oliver

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux