iptables: Using marks on NAT table
I'm using CONNMARK with layer7 for doing traffic shaping, and it works great.
My problem is that I want to SNAT packets marked with CONNMARK (actually i'm doing "-m mark --mark X -j CONNMARK --save-mark"), but no packets go through the rule "iptables -t nat -A POSTROUTING -m connmark --mark X -j SNAT --to x.x.x.x". I also tried using "-m mark --mark X -j SNAT --to x.x.x.x". All the marking is done on mangle table PREROUTING chain. I've searching in the web, and it seems to be all fine, but it doesn't work. Thanx a lot. |
All times are GMT -5. The time now is 05:15 AM. |