From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Subject: Re: iptables 1.3.1 MARK target Date: Thu, 17 Mar 2005 23:04:19 +0100 Message-ID: <4239FEE3.20700@eurodev.net> References: <20050317165248.GB28102@ltsp> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org To: Graham Keeling In-Reply-To: <20050317165248.GB28102@ltsp> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Graham Keeling wrote: > Hi, > I'm posting this in case you guys aren't aware of it... > > I'm using kernel 2.4.26. > I recently upgraded iptables from 1.2.8 to 1.3.1. > I found that the MARK target didn't work anymore. > I couldn't do --set-mark, --or-mark or --and-mark. > The error messages were; > --set-mark: invalid argument > --or-mark: kernel too old for --or-mark > --and-mark: kernel too old for --and-mark that's right since versioning stuff was pushed forward into kernel mainline, now we can extend current matches and target ensuring backward compatibility. If you want to use those parameters you must upgrade your kernel. -- Pablo