Re: [PATCH netfilter: nft] Add the connmark meta_key

[Patrick McHardy <kaber@trash.net>]

On Mon, Jan 06, 2014 at 07:09:58PM +0100, Kristian Evensen wrote:
> Hello,
> 
> On Mon, Jan 6, 2014 at 6:15 PM, Patrick McHardy <kaber@trash.net> wrote:
> > Well, actually the ct expression already supports connmark, as does userspace.
> >
> > #ifdef CONFIG_NF_CONNTRACK_MARK
> >         case NFT_CT_MARK:
> >                 dest->data[0] = ct->mark;
> >                 return;
> > #endif
> 
> Thank you very much for pointing this out. I will change my approach
> and add a set command in ct (similar to what was recently added to
> meta). Or is someone already working on this?

Not sure what you're trying to achieve, we already support the connmark
in the ct expression:

nft filter output ct mark 0x1 ...