blob: e39a02a520d383ef24852ab3e3108a55c5d636a2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
This module sets the netfilter mark value associated with a connection.
.TP
\fB--set-xmark\fR \fIvalue\fR[\fB/\fR\fImask\fR]
Zero out the bits given by \fImask\fR and XOR \fIvalue\fR into the ctmark.
.TP
\fB--save-mark\fR [\fB--nfmask\fR \fInfmask\fR] [\fB--ctmask\fR \fIctmask\fR]
Copy the packet mark (nfmark) to the connection mark (ctmark) using the given
masks. The new nfmark value is determined as follows:
.IP
ctmark = (ctmark & ~ctmask) ^ (nfmark & nfmask)
.IP
i.e. \fIctmask\fR defines what bits to clear and \fInfmask\fR what bits of the
nfmark to XOR into the ctmark. \fIctmask\fR and \fInfmask\fR default to
0xFFFFFFFF.
.TP
\fB--restore-mark\fR [\fB--nfmask\fR \fInfmask\fR] [\fB--ctmask\fR \fIctmask\fR]
Copy the connection mark (ctmark) to the packet mark (nfmark) using the given
masks. The new ctmark value is determined as follows:
.IP
nfmark = (nfmark & ~\fInfmask\fR) ^ (ctmark & \fIctmask\fR);
.IP
i.e. \fInfmask\fR defines what bits to clear and \fIctmask\fR what bits of the
ctmark to XOR into the nfmark. \fIctmask\fR and \fInfmask\fR default to
0xFFFFFFFF.
.IP
\fB--restore-mark\fR is only valid in the \fBmangle\fR table.
.PP
The following mnemonics are available for \fB--set-xmark\fR:
.TP
\fB--and-mark\fR \fIbits\fR
Binary AND the ctmark with \fIbits\fR. (Mnemonic for \fB--set-xmark
0/\fR\fIinvbits\fR, where \fIinvbits\fR is the binary negation of \fIbits\fR.)
.TP
\fB--or-mark\fR \fIbits\fR
Binary OR the ctmark with \fIbits\fR. (Mnemonic for \fB--set-xmark\fR
\fIbits\fR\fB/\fR\fIbits\fR.)
.TP
\fB--xor-mark\fR \fIbits\fR
Binary XOR the ctmark with \fIbits\fR. (Mnemonic for \fB--set-xmark\fR
\fIbits\fR\fB/0\fR.)
.TP
\fB--set-mark\fR \fIvalue\fR[\fB/\fR\fImask\fR]
Set the connection mark. If a mask is specified then only those bits set in the
mask are modified.
.TP
\fB--save-mark\fR [\fB--mask\fR \fImask\fR]
Copy the nfmark to the ctmark. If a mask is specified, only those bits are
copied.
.TP
\fB--restore-mark\fR [\fB--mask\fR \fImask\fR]
Copy the ctmark to the nfmark. If a mask is specified, only those bits are
copied. This is only valid in the \fBmangle\fR table.
|
