From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stephane Bortzmeyer Date: Thu, 25 Oct 2001 13:58:49 +0000 Subject: [LARTC] MARKing according to both net. interfaces? Message-Id: List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org [I had no success on the netfilter mailing list so may be here? I don't think there is a mailing list devoted to tc?] In order to later shape the traffic with tc, I'm trying to use iptables to mark traffic with a condition on both network interfaces (in and out). iptables -t mangle -A PREROUTING -p tcp -i eth4 -o eth5 -j MARK --set-mark 0x4 is accepted but ipchains -v shows that no packets are marked. I assume this is because, in PREROUTING, you don't know the output interface yet. 1) Am I correct? 2) Why is it accepted if it cannot work? 3) Is there a solution, since the mangle table only has OUTPUT (where -i is not accepted) and PREROUTING? (FreeBSD zealots keep screaming to me that it works fine with FreeBSD.) _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/