|
iptables: Using marks on NAT table
I'm using CONNMARK with layer7 for doing traffic shaping, and it works great.
My problem is that I want to SNAT packets marked with CONNMARK (actually i'm doing "-m mark --mark X -j CONNMARK --save-mark"), but no packets go through the rule "iptables -t nat -A POSTROUTING -m connmark --mark X -j SNAT --to x.x.x.x".
I also tried using "-m mark --mark X -j SNAT --to x.x.x.x".
All the marking is done on mangle table PREROUTING chain.
I've searching in the web, and it seems to be all fine, but it doesn't work.
Thanx a lot.
|
