Re: IMQ and marking

[Pascal Hambourg <pascal.mail@plouf.fr.eu.org>]

Fabio Marcone a écrit :
> In a post in a forum I see this:
> iptables -t mangle -A PREROUTING -m owner --pid-owner <PID of process> - 
> -j MARK --set-mark 2
> iptables -t mangle -A PREROUTING -j IMQ --todev 0
> 
> the second rule is used? so, rule matching in mangle table is not blocking?

Whether a matching rule stops further rule examination, if this is what 
you mean, depends on the target. MARK is not a terminal target. It is 
not specific to the mangle table, although (most if not all) 
mangle-specific targets are non terminal whereas filter and nat-specific 
targets are terminal.