public inbox for lartc@vger.kernel.org
 help / color / mirror / Atom feed
From: Marco Gaiarin <gaio@sv.lnf.it>
To: lartc@vger.kernel.org
Subject: Re: Policy routing (fwmark-based) and local traffic...
Date: Tue, 30 Jul 2019 13:00:34 +0000	[thread overview]
Message-ID: <20190730130034.GF2430@sv.lnf.it> (raw)
In-Reply-To: <20190730123207.GE2430@sv.lnf.it>

Mandi! Florian Westphal
  In chel di` si favelave...

> Yes, however, mangle OUTPUT will re-route in case of fwmark change.

A-HA! Seemed a bit too strange to me... i've tried with:

	iptables -t mangle -I OUTPUT -d $gip -p tcp -m multiport --dports ${TCP_PORTS} -m mark --mark 0/$MASK -j MARK --set-mark $MARK/$MASK

and does not work; you say me that i've to use:

	iptables -t mangle -I OUTPUT -d $gip -p tcp -m multiport --dports ${TCP_PORTS} -j MARK --set-mark $MARK/$MASK

(eg: ignore eventually 'implicit' mark set by the routing decision) to
make it work?

're-route' happen automatically?


Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

  parent reply	other threads:[~2019-07-30 13:00 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-07-30 12:32 Policy routing (fwmark-based) and local traffic Marco Gaiarin
2019-07-30 12:41 ` Florian Westphal
2019-07-30 13:00 ` Marco Gaiarin [this message]
2019-07-30 13:46 ` Florian Westphal
2019-07-30 14:12 ` Marco Gaiarin
2019-07-31  1:34 ` Grant Taylor
2019-07-31  9:10 ` Marco Gaiarin
2019-08-05  1:46 ` Grant Taylor

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20190730130034.GF2430@sv.lnf.it \
    --to=gaio@sv.lnf.it \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox