From mboxrd@z Thu Jan 1 00:00:00 1970 From: Eric Leblond Subject: RE: Change of ip addresses continues.... :( Date: Thu, 26 Aug 2004 23:33:12 +0200 Sender: netfilter-bounces@lists.netfilter.org Message-ID: <1093555992.4293.37.camel@porky> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-EbjOIvR9SbR8+9QEGN0s" Return-path: In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: netfilter-bounces@lists.netfilter.org To: netfilter@lists.netfilter.org Cc: dravya@magma.ca --=-EbjOIvR9SbR8+9QEGN0s Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Thu, 2004-08-26 at 23:26, Jason Opperisano wrote: > > I have been trying various set of rules in various table in order to ha= ve packets go over > > the right link. ie. packet's src add should match outgoing link's ip ad= dress.YET, there > > iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark > > iptables -t mangle -A PREROUTING -m mark ! --mark 0 -j ACCEPT > > iptables -t mangle -A PREROUTING -m mark ! --mark 0 -p icmp -j MARK --s= et-mark 1 > > iptables -t mangle -A PREROUTING -m mark ! --mark 0 -j MARK --set-mark = 2 There's something weird here :=20 -m mark ! --mark 0=20 at each line you should better do=20 -m mark --mark 0 at the two last lines. BR, --=20 Eric Leblond INL --=-EbjOIvR9SbR8+9QEGN0s Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQBBLlcYnxA7CdMWjzIRAtuGAJ0UADoZkkN2NzCeUyJkNDqNw0ld6wCeOu7r FSQzGMp07R118Ta0G8CQf0Y= =DUze -----END PGP SIGNATURE----- --=-EbjOIvR9SbR8+9QEGN0s--