iptables: marking packets question

by Dale Went » Sat, 08 Dec 2001 04:41:17

If I mark a packet in prerouting, should I be able to see it as it goes
out the interface.

I added these 2 lines

iptables -t mangle -I PREROUTEING -i eth3 -j MARK --set-mark 2

iptables -A OUTPUT -m mark --mark2 -j LOG --log-level info --log-prefix
"Marked"

I am not seeing the packets as they go out.
The port that they are going out is masqueraded with a -J MASQERADE

Thanks,
Dale Wentz

Is it possible to issue the command:

iptables -t mangle ... -j mark --set-mark <fwmark>

multiple times, with distinct <fwmark> values OR'ed together, at
different chain location of mangle table?

I'm using mangle table mark for two different purposes:

(1). PREROUTING mangle mark for policy-based routing, and
(2). FORWARD mangle mark for tc Queue filtering.

It seems impossible to implement both using iptables MANGLE chains on
the same IP packet.

Any suggestions?

--- Jeffrey

1 post • Page:1 of 1

Very Computer