Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #3054

Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't)

From Pascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Newsgroups comp.os.linux.networking
Subject Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't)
Date 2014-08-03 23:22 +0200
Organization Plouf !
Message-ID <lrm963$ufd$1@saria.nerim.net> (permalink)
References <gof.1386078295.6555@somewhere.invalid> <aaeabc92-2447-497e-9a13-bd486fdbe2cd@googlegroups.com>

Show all headers | View raw


logsnaath@gmail.com a écrit :
> I am facing similar issue.

Similar to what ? That thread is so old that my news server does not
have the messages any more.

> Does locally generated packets reach the OUTPUT chain after routing decision?

Yes. There is always a routing decision before the OUTPUT chains. There
may be a rerouting decision after the OUTPUT chains.

> Should there be any entries in main table always

Not necessarily, but the routing rules and routes must be able to route
the original packets before it is mangled in the OUTPUT chains,
otherwise it is discarded immediately.

Anyway, what would be the purpose of flushing the main routing table ?

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-03 13:45 +0000
  Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2013-12-03 16:46 +0200
    Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-03 18:07 +0000
    Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-03 23:58 +0100
  Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-04 00:13 +0100
    Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-07 12:36 +0000
      Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-07 16:14 +0100
        Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-07 16:21 +0100
  Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) logsnaath@gmail.com - 2014-08-03 13:06 -0700
    Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-08-03 23:22 +0200

csiph-web