Hello,
I would like to mark outgoing packet (on server side) with SAME MARK as on incoming (NATed or CONNECTed) packet.
There is option tcp_outgoing_mark with which I can mark packets.
But there is no ACL option to check incoming mark.
If there is already a way to do this then please guide.
Otherwise I would like to suggest:
Option 1)
-----------
Syntax: tcp_outgoing_mark SAMEMARK [!]aclname
where SAMEMARK is special (literal) word where acl matching are applied same mark as on incoming packet.
For e.g I can do:
tcp_outgoing_mark SAMEMARK all
And all packets will be applied same mark as incoming packet mark.
Option 2)
-----------
Have an acl:
Syntax: acl aclname nfmark mark-value
Then I can do something like this:
acl mark101 nfmark 0x101
tcp_outgoing_mark 0x101 mark101
If both above options can be combined then it would be even better.
Thanks in advance,
Amm.
Received on Sat Mar 15 2014 - 05:47:05 MDT
This archive was generated by hypermail 2.2.0 : Sat Mar 15 2014 - 12:00:05 MDT