Re: tc and CONNMARK

[Fabio Marcone <fabio.marcone@duet.it>]

hello,
> For me it's better if you use different marks.

I note that packets are marked correctly but in the wan interface tc 
filter send them on the wrong class. is the same problem you had it?
>
> After, where do you mark the packets (in iptables)? iptables/kernel
> version?
I mark packets in iptables (mangle table PREROUTING chain):

iptables -t mangle -A PREROUTING -p TCP -m mac --mac-source 
xx:xx:xx:xx:xx:xx--dport 443 -j MARK --set-mark 8

iptables version: 1.4.3.2
kernel version: 2.6.29.3

both patched to use IMQ devices.
>
> Normally I don't use connmark because when I try some time ago to use
> it, I found some "not marked" problems, so I switch to classid. Better
> and cleaner for me.
what kind of problems? What do you mean with "I switch to classid" ?

thanks in advance,
Fabio