Re: iptables 1.3.1 MARK target

[Pablo Neira <pablo@eurodev.net>]

Pablo Neira wrote:
> Graham Keeling wrote:
> 
>> Hi,
>> I'm posting this in case you guys aren't aware of it...
>>
>> I'm using kernel 2.4.26.
>> I recently upgraded iptables from 1.2.8 to 1.3.1.
>> I found that the MARK target didn't work anymore.
>> I couldn't do --set-mark, --or-mark or --and-mark.
>> The error messages were;
>> --set-mark: invalid argument
>> --or-mark: kernel too old for --or-mark
>> --and-mark: kernel too old for --and-mark
> 
> 
> that's right since versioning stuff was pushed forward into kernel 
> mainline, now we can extend current matches and target ensuring backward 
> compatibility. If you want to use those parameters you must upgrade your 
> kernel.

wait a minute, I got what you meant. You are using MARK from 
patch-o-matic-ng and doesn't work anymore. So you are right, we need to 
port MARK-operations to the new versioning infrastructure, then it will 
work fine with iptables-1.3

--
Pablo