Hi all.
I want to limit bandwidth by using tc and iptables flowing: http://lartc.org/howto/lartc.cookboo...nat.intro.html

When I mark packets using commands:
....
iptables -t mangle -A PREROUTING -p icmp -j MARK --set-mark 0x1
....

I try testing this system without iptables save, it works well.

Then, i save iptables, it's OK. But i restart iptables, it's failed.
line 9 it contain COMMIT.
line 8 it contain:
-A PREROUTING -p tcp -j MARK --set-mark 0x1

i think there is the error in line 8. So, I delete line 8 in iptables file. Restart, it's OK, no error.
Of course, it can't mark packets and system can't run well.

What can i do to fix this error?

Thanks all.

If you would like help to troubleshoot this problem, would you please post your iptables configuration as well as the error message(s) that you are receiving? Also, please use the code tags, which are similar to the quote ones, when you post the listing. You mention line 20 in your post that seems to be a culprit, but I don't see anything in the how-to you reference that indicates what this line is.

1 members found this post helpful.

I use commands:
My iptables configuration:
I restart service iptables, it's error
Line 9 it contain COMMIT.
I think error at line 8. I delete line 8, restart , it've no error. But it can't mark.

Thanks for helping.