CONNMARK rules

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello list,

I have two lines in the iptables PREROUTING mangle table to split up
traffic from even and odd ip numbers:

-s 10.32.24.0/23 -j CONNMARK --set-mark 0x1001
-s 10.32.24.0/255.255.254.1 -j CONNMARK --set-mark 0x1000

But I noticed that rules in this order does not work (everything
gets 0x1001):

-s 10.32.24.0/255.255.254.1 -j CONNMARK --set-mark 0x1000
-s 10.32.24.0/23 -j CONNMARK --set-mark 0x1001

So I assume the the CONNMARK rules are not end rules (hit = exit)

Is that correct?

R.


-- 
richard lucassen
http://contact.xaq.nl/



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux