Skip to main content
1 of 3
pylover
  • 3.6k
  • 6
  • 23
  • 26

iptables, mark and sense packets between machines(client and router)?

Can i mark a packet on the client's OUTPUT chain and add iproute policy on the router , to route them via specific gateway?

That is which i tried out. but no results.

My clients mangle table dump:

Chain OUTPUT (policy ACCEPT 13884 packets, 2327K bytes)
 pkts bytes target     prot opt in     out     source               destination         
13917 2330K MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            MARK set 0x2

Chain POSTROUTING (policy ACCEPT 13889 packets, 2328K bytes)
 pkts bytes target     prot opt in     out     source               destination         
13889 2328K LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x2 LOG flags 0 level 4

iptables mangle table's INPUT chain dump on the router:

Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x2 LOG flags 0 level 4
 2074  196K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0            state RELATED,ESTABLISHED
   88 14890 ACCEPT     all  --  ethint *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           

After some moments and sending test packets, the the LOG counters on the router is equals zero.

What's happened to my packets? where my packets lose their marks?

Thanks in advanced.

pylover
  • 3.6k
  • 6
  • 23
  • 26