From: Sven Schuster <schuster.sven@gmx.de>
To: Ruslan Spivak <alienoid@is.lg.ua>
Cc: netfilter@lists.netfilter.org
Subject: Re: MARK and ! question
Date: Thu, 26 Jun 2003 16:51:50 +0200 [thread overview]
Message-ID: <3EFB0886.9060000@gmx.de> (raw)
In-Reply-To: 3EFAF50E.3050200@is.lg.ua
What about using a user-defined chain like this:
iptables -t mangle -N setmark
iptables -t mangle -A setmark -s ! 193.220.70.0/27 -d 193.220.70.32/27 \
-j RETURN
iptables -t mangle -A setmark -s ! 193.108.240.0/22 -d 193.220.70.32/27 \
-j RETURN
iptables -t mangle -A setmark -j MARK --set-mark 107
iptables -t mangle -A POSTROUTING -j setmark
Hope this helps
Sven
Ruslan Spivak wrote:
> Hello.
>
> I need to mark with value 107 packets that are going NOT from the
> 193.220.70.0/27 network and NOT from the 193.108.240.0/22 network.
> Is it possible?
>
> Below two lines seem not to work properly because second rule won't be
> reached.
>
> iptables -t mangle -A POSTROUTING -s ! 193.220.70.0/27 -d
> 193.220.70.32/27 -j MARK --set-mark 107
>
> iptables -t mangle -A POSTROUTING -s ! 193.108.240.0/22 -d
> 193.220.70.32/27 -j MARK --set-mark 107
>
> Your help is very, very appreciated.
>
> Best regards,
> Ruslan
>
>
>
next prev parent reply other threads:[~2003-06-26 14:51 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-06-26 13:28 MARK and ! question Ruslan Spivak
2003-06-26 14:51 ` Sven Schuster [this message]
2003-06-26 15:11 ` Ruslan Spivak
2003-06-26 15:17 ` Chris Wilson
2003-06-26 15:22 ` Sven Schuster
2003-06-26 15:39 ` Ruslan Spivak
2003-06-26 15:40 ` Chris Wilson
2003-06-26 15:19 ` Sven Schuster
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3EFB0886.9060000@gmx.de \
--to=schuster.sven@gmx.de \
--cc=alienoid@is.lg.ua \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.