Re: ebtables '--mark-target' problems

Op do, 09-02-2006 te 11:53 +0100, schreef Pawel Kraszewski:
> 1) --mark-target does not accept user-defined chains. Is it by design? (in the 
> folowing, chain to_lan_local of course exists)
> 
> ebtables -t nat -A HtbIn01 -d 00:EE:B1:05:0D:9A -j mark \
>          --set-mark 0x10066 --mark-target to_lan_local
> Illegal --mark-target target.

It's not implemented, although it seems this functionality can be added
while maintaining backwards compatibility. But you can easily circumvent
this lack of functionality by doing something like this:

ebtables -t nat -A HtbIn01 -d 00:EE:B1:05:0D:9A -j mark \
--set-mark 0x10066 --mark-target CONTINUE
ebtables -t nat -A HtbIn01 -d 00:EE:B1:05:0D:9A -j to_lan_local

> 2) What the hack is 'base chain' in the following error? 
> 
> ebtables -t nat -A HtbIn01 -d 00:EE:B1:05:0D:9A -j mark \
>          --set-mark 0x10066 --mark-target RETURN
> --mark-target RETURN not allowed on base chain.

What ebtables version are you using? The RETURN target should be allowed
in your user-defined chain.
You can only use the return target in a user-defined chain, for the
obvious reason that a base chain hasn't got any chain to return to.

cheers,
Bart




-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642