* MARK?
@ 2003-01-18 23:46 Drew Einhorn
2003-01-20 10:24 ` MARK? Maciej Soltysiak
0 siblings, 1 reply; 2+ messages in thread
From: Drew Einhorn @ 2003-01-18 23:46 UTC (permalink / raw)
To: netfilter list
Hi,
Oskar Andreasson's Iptables Tutorial 1.1.9 lead me to believe that MARK
is capable of doing what I want, but does not give enough details. On
further reading I decided maybe not.
What I to do is MARK a packet's stream. I want to be able to match
ESTABLISHED packets to determine if they belong to a MARKed stream.
Is this possible?
Thanks,
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: MARK?
2003-01-18 23:46 MARK? Drew Einhorn
@ 2003-01-20 10:24 ` Maciej Soltysiak
0 siblings, 0 replies; 2+ messages in thread
From: Maciej Soltysiak @ 2003-01-20 10:24 UTC (permalink / raw)
To: Drew Einhorn; +Cc: netfilter list
> What I to do is MARK a packet's stream. I want to be able to match
> ESTABLISHED packets to determine if they belong to a MARKed stream.
How about:
Well, just mark the packets and then match the marked that are belong to
ESTABLISHED, like so:
example:
iptables -A PREROUTING -t mangle -p tcp --dport 80 -j MARK --set-mark 3
iptables -A FORWARD -m state --state ESTABLISHED -m mark --mark 3 -j LOG
Regards,
Maciej Soltysiak
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2003-01-20 10:24 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-01-18 23:46 MARK? Drew Einhorn
2003-01-20 10:24 ` MARK? Maciej Soltysiak
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox