Re: [LARTC] know if packets are marked

[Torsten Luettgert <t.luettgert@pressestimmen.de>]

On Mi, 2007-01-24 at 07:29 -0300, Roberto Pereyra wrote:
> /usr/local/sbin/iptables -A PREROUTING -t mangle -m physdev
> --physdev-in eth1 -p tcp --dport 80 -j MARK --set-mark 2
> 
> How I can know if this packets are marked ?

On the same machine (your bridge), you can match the mark later with

iptables ... -m mark --mark value[/mask] ...

and there is a classifier for tc, too, I think.

The mark doesn't stay on the packets once they leave your bridge,
though, so you can't match them on other boxes.

Regards,
Torsten


_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc