Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #3053

Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't)

Show all headers | View raw

I am facing similar issue.

Does locally generated packets reach the OUTPUT chain after routing decision?
Should there be any entries in main table always
Any good solution.

=============
 ip route flush cache
 ip route flush table main

 iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE
 iptables -t mangle -A OUTPUT -m owner --uid-owner squid -j MARK --set-mark 0x5
 iptables -t mangle -A OUTPUT -j LOG --log-prefix "IPtab: "

 ip route add 192.168.1.0/24 dev wlan0 src 192.168.1.103 table logu
 ip route add default via 192.168.1.1 dev wlan0 table logu
 ip rule add fwmark 0x5 table logu

 ip route flush cache

========================
As squid user

$ ping 74.125.236.39
connect: Network is unreachable

Adding an entry like this in main table works
$ route add -net 0.0.0.0/0 dev wlan0

Regards
Logu

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-03 13:45 +0000
  Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2013-12-03 16:46 +0200
    Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-03 18:07 +0000
    Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-03 23:58 +0100
  Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-04 00:13 +0100
    Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-07 12:36 +0000
      Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-07 16:14 +0100
        Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-07 16:21 +0100
  Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) logsnaath@gmail.com - 2014-08-03 13:06 -0700
    Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-08-03 23:22 +0200

csiph-web