path: root/extensions/
diff options
author/C=EU/ST=EU/CN=Patrick McHardy/ </C=EU/ST=EU/CN=Patrick McHardy/>2008-01-20 13:31:13 +0000
committer/C=EU/ST=EU/CN=Patrick McHardy/ </C=EU/ST=EU/CN=Patrick McHardy/>2008-01-20 13:31:13 +0000
commitcdd0312bda6af74fba04626ffe6a5891bfe1c49d (patch)
treecd346016de4b02408972e3f8d11d214ab3aef501 /extensions/
parentf570223b4c6b59c7ad2601f51046cd2045d13edc (diff)
[PATCH]: libxt_MARK r2
Add support for xt_MARK target revision 2. Also consolidate and Signed-off-by: Jan Engelhardt <>
Diffstat (limited to 'extensions/')
1 files changed, 25 insertions, 0 deletions
diff --git a/extensions/ b/extensions/
new file mode 100644
index 0000000..9585f02
--- /dev/null
+++ b/extensions/
@@ -0,0 +1,25 @@
+This target is used to set the Netfilter mark value associated with the packet.
+The target can only be used in the \fBmangle\fR table. It can, for example, be
+used in conjunction with routing based on fwmark (needs iproute2).
+\fB--set-xmark\fR \fIvalue\fR[\fB/\fR\fImask\fR]
+Zeroes out the bits given by \fImask\fR and XORs \fIvalue\fR into the packet
+mark ("nfmark"). If \fImask\fR is omitted, 0xFFFFFFFF is assumed.
+\fB--set-mark\fR \fIvalue\fR[\fB/\fR\fImask\fR]
+Zeroes out the bits given by \fImask\fR and ORs \fIvalue\fR into the packet
+mark. If \fImask\fR is omitted, 0xFFFFFFFF is assumed.
+The following mnemonics are available:
+\fB--and-mark\fR \fIbits\fR
+Binary AND the nfmark with \fIbits\fR. (Mnemonic for \fB--set-xmark
+0/\fR\fIinvbits\fR, where \fIinvbits\fR is the binary negation of \fIbits\fR.)
+\fB--or-mark\fR \fIbits\fR
+Binary OR the nfmark with \fIbits\fR. (Mnemonic for \fB--set-xmark\fR
+\fB--xor-mark\fR \fIbits\fR
+Binary XOR the nfmark with \fIbits\fR. (Mnemonic for \fB--set-xmark\fR