[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

iptables mark target



Hey,

i use the mark target for outbound shaping, but i am not sure, wether the 
chain will be left if a rule matches or not. In other words in which 
direction do i have to set up the rules?
first match apply oder last match?

part of the script:
....
iptables -t mangle -A MYSHAPER-OUT -p icmp -j MARK --set-mark 20               
# ICMP
iptables -t mangle -A MYSHAPER-OUT -p udp -j MARK --set-mark 20                
# UDP
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport ssh -j MARK --set-mark 20    
# ssh
iptables -t mangle -A MYSHAPER-OUT -p tcp --sport ssh -j MARK --set-mark 20    
# ssh
iptables -t mangle -A MYSHAPER-OUT -p tcp --sport 0:1024 -j MARK --set-mark 21 
# low port traffic
iptables -t mangle -A MYSHAPER-OUT -p tcp --dport 0:1024 -j MARK --set-mark 21 
# low port traffic
...

Regards
 Frank



Reply to: