dear all,

    I want to set a mark to a packet when the packet come into a linuxbox, then check 
the mark to decide how to deal with the packet, but i'm so fool that i don't know how 
to check the mark, i think set mark rule should like this:
        iptables -t mangle -A PREROUTING -s 192.168.0.1 -j MARK --set-mark 0x01
        iptables -t nat -A PREROUTING -m MARK --check-mark ! 0x01 -j DROP
        iptables -t filter -A FORWARD -m MARK --check-mark ! 0x01 -j DROP
is it right?
my english is so poor, hehe, wish you can understander my words, thank all friends 
here.

best regards
liliaoyuan


Reply via email to