Re: how to log a mark'ed packet in iptables?

To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx, busterb@xxxxxxxxxxxxxxx
Subject: Re: how to log a mark'ed packet in iptables?
From: Joseph Mack <mack.joseph@xxxxxxx>
Date: Thu, 28 Mar 2002 06:58:58 -0500
Brent Cook wrote:
> Joe:
> This isn't exactly what you asked for, but the effect is the same. After
> marking a packet like so:


I hadn't thought about this way of doing it. Mathematically it should be 
equivelent, but it requires that the packet does get marked and nothing wierd
happens and I haven't flubbed up something else. 
I'd really like to match the mark just in case.

>  I looked in the man page, and couldn't figure out where --mark is
> supposed to go.

at least that's two of us. 

Horms sent me this offline. iptables accepts
the syntax - now to see if I can track packets...

modprobe iptable_mangle
modprobe ipt_MARK
iptables -t mangle -A PREROUTING -d \
        -m mark -j MARK --set-mark 1 --mark 1
iptables -t mangle -A PREROUTING  \
        -m mark --mark 1 -j LOG --log-level DEBUG --log-prefix "fwmark 1: "

Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center, 
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA

<Prev in Thread] Current Thread [Next in Thread>