From mboxrd@z Thu Jan 1 00:00:00 1970 From: Gabriel Kujawski Subject: mark match Date: Mon, 30 Jun 2003 22:49:23 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3F00A253.3060703@brama.waw.pl> Reply-To: gabriel.kujawski@brama.waw.pl Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter Hi, I mark packets this way: iptables -t mangle -I PREROUTING -p icmp -s 192.168.0.2 -d 0/0 -j MARK --set-mark 0x2 This workes correctly. Next I try to log these marked packets with ULOG target: iptables -t mangle -I POSTROUTING -m mark --mark 0x2 -j ULOG --ulog-nlgroup 1 --ulog-prefix MARKtest but this rule doesn't work. However, if I use FORWARD chain packets are logged. Could you tell me the reason?