[Firehol-devs] Mark + CONNMARK
firehol at vigor.co.za
Thu Nov 29 18:06:06 GMT 2007
I am using firehol and would now like to start using it for policy routing.
Specifically using multiple providers, and servers nat'ed to different
What i need is to save a incoming connection's interface (and external ip)
--save-mark [--mask mask]
Copy the netfilter packet mark value to the connection mark.
a mask is specified then only those bits are copied.
then in the pre-routing
--restore-mark [--mask mask]
Copy the connection mark value to the packet. If a mask is
ified then only those bits are copied. This is only valid in
this will allow me to use different routing tables for packets to and from
internal servers based on the saved mark to keep all packets going in and
out of the same interface/provider the session was started on.
Thus once a connection has been established we use the CONNMARK to keep same
mark on all packets, and then ip rule to pick routing table.
Thus how would i use --restore-mark and --save-mark under firehol ?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Firehol-devs