[SOLVED] iptable Mark packet and use this mark in other rule

toure32 · 04-21-2010, 11:24 AM

Hi, all
I'll like to mark all packet coming from and going to an ip adresse. And I'd like to match that mark packet in an other rule.
Ex :
Rule 1 : Mark all packet coming from 192.168.2.0/25 with number 1
Rule 2 : Drop all packets which has been mark with number 1

How could I write these tow rules.
Regards.

troop · 04-21-2010, 02:07 PM

example:

Code:

iptables -A PREROUTING -t mangle --match mark --mark 1 -j ACCEPT
iptables -A PREROUTING -t mangle -i eth1 -j MARK --set-mark 1

or you can use chains rather then mark.
or -m recent

toure32 · 04-21-2010, 02:13 PM

Quote:

Originally Posted by troop

use chains rather then mark.
or you can use -m recent

Can you give detaille please.
regards.

troop · 04-21-2010, 02:35 PM

Quote:

Originally Posted by toure32

Can you give detaille please.
regards.

example with chain:

Code:

iptables -N m1
iptables -A INPUT -s 192.168.2.0/25 -j m1
iptables -A m1 -j DROP