hi

i have a short question regarding iptables' packet marking ability:

if i have the following two rules set occuring in a row, which one takes precedence?

iptables -t mangle -A FORWARD -j MARK --set-mark 0 -i ppp0 -o eth1
iptables -t mangle -A FORWARD -j MARK --set-mark 1 -i ppp0 -o eth1 -d 10.147.1.0/24

understand me, i got a packet which is destined for 10.147.1.1. therefore, both rules will apply. first, the packet is being marked with 0x00, the second rule marks the same packet with 0x01 - is this the way its goin?

or may the packet only be marked once? which means, after marking it with 0x00, the second rule will be processed, but does not change the mark?


hmm hmm hmm.... ;-)

tia
meks