Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #421 > unrolled thread

Problem setting connmark with ip6tables

Back to article view | Back to comp.os.linux.networking

Contents

  Problem setting connmark with ip6tables Washington Ratso <jobhunts02@aol.com> - 2011-07-19 08:55 -0700
    Re: Problem setting connmark with ip6tables KR <kristian.rasmussen@broadpark.no.spam.com> - 2011-07-19 18:41 +0200

#421 — Problem setting connmark with ip6tables

I am upgrading some software to IPv6 and am running into a problem
setting connmark with ip6tables version 1.4.4.


With iptables, I can do:

iptables -A PREROUTING -i sat0 -t nat -m dscp --dscp $i -j CONNMARK --
set-mark 99

for i = 0 to 63 with no problem.



If I change to ip6tables:

ip6tables -A PREROUTING -i sat0 -t nat -m dscp --dscp $i -j CONNMARK --
set-mark 99

I get the following error:


ip6tables v1.4.4: can't initialize ip6tables table `nat': Table does
not exist (do you need to insmod?)


What is the syntax to set the connmark with ip6tables?

[toc] | [next] | [standalone]

#422

On 19.07.2011 17:55, Washington Ratso wrote:
> 
> If I change to ip6tables:
> 
> ip6tables -A PREROUTING -i sat0 -t nat -m dscp --dscp $i -j CONNMARK --
> set-mark 99
> 
> I get the following error:
> 
> 
> ip6tables v1.4.4: can't initialize ip6tables table `nat': Table does
> not exist (do you need to insmod?)

Of course, as there is no such thing as NAT in IPv6, and consequently no
'nat' table.

> What is the syntax to set the connmark with ip6tables?

I haven't tried it myself, but how about using the PREROUTING chain in
the 'mangle' table? It has a CONNMARK target.

[toc] | [prev] | [standalone]

Back to top | Article view | comp.os.linux.networking

csiph-web