Re: Policy routing (fwmark-based) and local traffic...

Marco Gaiarin <[email protected]> Tue, 30 Jul 2019 13:00:34 +0000

Newsgroups	org.kernel.vger.lartc
Message-ID	<[email protected]>

Mandi! Florian Westphal
  In chel di` si favelave...

> Yes, however, mangle OUTPUT will re-route in case of fwmark change.

A-HA! Seemed a bit too strange to me... i've tried with:

	iptables -t mangle -I OUTPUT -d $gip -p tcp -m multiport --dports ${TCP_PORTS} -m mark --mark 0/$MASK -j MARK --set-mark $MARK/$MASK

and does not work; you say me that i've to use:

	iptables -t mangle -I OUTPUT -d $gip -p tcp -m multiport --dports ${TCP_PORTS} -j MARK --set-mark $MARK/$MASK

(eg: ignore eventually 'implicit' mark set by the routing decision) to
make it work?

're-route' happen automatically?


Thanks.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)