Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

7
  • Please post the rules again with iptables -nvL …, as some conditions are omitted without -v. Also tell us exactly how you're sending packets. Commented Sep 21, 2013 at 23:21
  • @Gilles, there are rules that already generated by `iptables -vnL', and just a simple ping from a client (which connected via a wireless-accesspoint to the router) to the outside of the intranet. Commented Sep 21, 2013 at 23:25
  • Sorry about -v, my bad, I misread. Hmmm, are those ping packets from the inside supposed to be caught by the mangle chain on the router? I need to look it up. Commented Sep 21, 2013 at 23:34
  • @Gilles, i think marks are deleted before packet leaving the box. because there was the same result, after replacing the wifi-router by a cross-cat5-cable. Commented Sep 21, 2013 at 23:35
  • Oh, I just figured out what you're doing. No, this can't possibly work: marks aren't stored inside the packets, they're part of kernel data structures. You can't set a mark on one machine and see it on another machine. What are you trying to do? Commented Sep 21, 2013 at 23:39