Re: IPTABLES + PREROUTING + --set-mark + Ubuntu

["U.Mutlu" <for-gmane@mutluit.com>]

The Media Server wrote, On 01/15/2015 11:34 PM:
> Hi I can't get my PREROUTING iptables rule to mark my packets via
> --set-mark on Ubuntu
>
> iptables -t mangle -A PREROUTING -p tcp --sport 80 -j MARK --set-mark 2
> rule add fwmark 2 table 2
>
> iptables -t mangle -A PREROUTING -j MARK --set-mark 2
> iptables -t mangle -A INPUT -j MARK --set-mark 2
> iptables -t nat -A INPUT -j MARK --set-mark 2
> iptables -t nat -A PREROUTING -j MARK --set-mark 2
>
> None of the above pass trough the table2
>
> but this does pass trough the table 2 with this rule:
> ip rule add from 192.168.2.0/24 table 2
>
> ----
> Is there a problem marking packets in Ubuntu 14.04.1 LTS and iptables v1.4.21?

Have you also defined table 2 in /etc/iproute2/rt_tables ?
It must be something like:
2 mytab2
I think there is no tool for it, you have to edit the file.

later you can use
   ip rule ls
   ip route ls
   ip route ls table 2
or alternatively
   ip route ls table mytab2

and don't forget to del the wrong or excess entries there...
   ip rule del fwmark 2 table 2
   ip route flush table 2