Re: CONFIG_IP_ROUTE_FWMARK not working in Debian !

[Mariusz Kruk <kruk@rdc.pl>]

Nelson Castillo napisał(a):
> > # iptables -t mangle -A PREROUTING -s <LAN_IP> -j MARK --set-mark 5
> I guess you should use the conntrack module. I'm not sure,
> but I think you're marking only the first packet of the
> connection.

Naaah. What does mangling packets have to do with connection tracking?

> > Does anyone have CONFIG_IP_ROUTE_FWMARK working in debian?
> I do.

AOL.

iptables -t mangle -A PREROUTING -i eth1 -p 47 -j MARK --set-mark 47
[...]
ip rule add from all fwmark 0x2f lookup main pref 2

Working perfectly. 2.4.27-2-686