Re: IMQ / new Dummy device post.

[Martin Josefsson <gandalf@xxxxxxxxxxxxxx>]

On Sun, 18 Apr 2004, Andy Furniss wrote:

> > with connmark you mark the connection, and then you can "restore" that
> > mark to packets in either direction in the mangle table of iptables.
> >
> > connmark isn't incompatible with connbytes. It's just that both patches
> > modify the same part of the code, a struct, and the patch program can't
> > handle that. You'll have to fix some rejects by hand, that's it.
> >
>
> Thanks for that - though I hope not to have to use it now, just to
> confirm - does it work in all of the 5 mangle tables or more
> specifically could I mark every connection from local processes in
> output and restore the marks in prerouting?

It works in all of the 5 mangle chains iirc.

/Martin