From: Sheldon Hearn <sheldonh@clue.bz>
To: Cedric Blancher <blancher@cartel-securite.fr>
Cc: Ming-Ching Tiew <mingching.tiew@redtone.com>,
netfilter@lists.netfilter.org
Subject: Re: skip other iptables marking if packet is already marked
Date: Mon, 31 May 2004 11:36:36 +0200 [thread overview]
Message-ID: <1085996196.9107.5.camel@axl.seasidesoftware.co.za> (raw)
In-Reply-To: <1085991395.26732.12.camel@anduril.intranet.cartel-securite.net>
On Mon, 2004-05-31 at 10:16, Cedric Blancher wrote:
> I think your ruleset does not work because a packet without a mark will
> match your non-zero mark rule. I mean that no mark is different than 0,
> so all packets will match the first "-m mark ! --mark 0" rule.
Really? No mark and mark 0 are different?
How do you distinguish an unmarked packet in a ruleset?
I ask because this relates to an as yet unanswered question of mine,
with Subject "CONNMARK restore-mark creates conntrack entry?"
Ciao,
Sheldon.
next prev parent reply other threads:[~2004-05-31 9:36 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-05-31 7:24 skip other iptables marking if packet is already marked Ming-Ching Tiew
2004-05-31 8:16 ` Cedric Blancher
2004-05-31 8:41 ` Ming-Ching Tiew
2004-05-31 9:36 ` Sheldon Hearn [this message]
2004-05-31 11:46 ` Cedric Blancher
2004-05-31 11:56 ` Sheldon Hearn
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1085996196.9107.5.camel@axl.seasidesoftware.co.za \
--to=sheldonh@clue.bz \
--cc=blancher@cartel-securite.fr \
--cc=mingching.tiew@redtone.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox