Iptables MARK

cjreyn · 11-02-2011, 04:47 AM

Hi all,
What is the maximum value I can use for packet marking in iptables? Is the mark using a single byte, so a maximum of 255 values?

I'm wanting to do some per IP addr traffic shaping with tc, and it looks as though the only method is to mark packets with iptables, and then send them to a class dedicated to that mark/IP pair. I have less than 255 known IP addresses so a max mark value of 255 won't be a problem.

Cheers

leslie_jones · 11-02-2011, 10:44 AM

According to this:
http://andys.org.uk/bits/2010/01/27/...fun-with-mark/

It says:

"The MARK target lets us set a 32-bit value (or 0xFFFFFFFF) on a packet, which we can then look for later with the mark match. This in itself can be useful, but where it gets really handy is adding the values together."

But I've had trouble myself locating it in the official docs.

Hope that is some use.