diff options
| author | Phil Sutter <phil@nwl.cc> | 2020-05-20 01:00:57 +0200 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2020-05-27 17:18:31 +0200 |
| commit | 7f0a69c8fe78da130cc52ea9fc35ffb9cbc2b8ef (patch) | |
| tree | ccc258e9e880824e3c6246c954739edaecb872cd /extensions | |
| parent | 5906bcf10d0eda9d08c98a618ea7c8ade0018e0c (diff) | |
doc: libxt_MARK: OUTPUT chain is fine, too
In order to route packets originating from the host itself based on
fwmark, mangle table's OUTPUT chain must be used. Mention this chain as
alternative to PREROUTING.
Fixes: c9be7f153f7bf ("doc: libxt_MARK: no longer restricted to mangle table")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions')
| -rw-r--r-- | extensions/libxt_MARK.man | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/extensions/libxt_MARK.man b/extensions/libxt_MARK.man index 712fb76f..b2408597 100644 --- a/extensions/libxt_MARK.man +++ b/extensions/libxt_MARK.man @@ -1,7 +1,7 @@ This target is used to set the Netfilter mark value associated with the packet. It can, for example, be used in conjunction with routing based on fwmark (needs -iproute2). If you plan on doing so, note that the mark needs to be set in the -PREROUTING chain of the mangle table to affect routing. +iproute2). If you plan on doing so, note that the mark needs to be set in +either the PREROUTING or the OUTPUT chain of the mangle table to affect routing. The mark field is 32 bits wide. .TP \fB\-\-set\-xmark\fP \fIvalue\fP[\fB/\fP\fImask\fP] |