On Tue, Aug 18, 2015, at 03:28 PM, Tom Eastep wrote: > It depends on how you have broken down the mark for various uses -- see > http://www.shorewall.org/PacketMarking.html#Values.
Thanks. The problem was the mask -- for the given mark format. For the used marks, editing in shorewall6.conf MASK_BITS= PROVIDER_BITS= PROVIDER_OFFSET= TC_BITS= ZONE_BITS=0 to MASK_BITS=8 PROVIDER_BITS=8 PROVIDER_OFFSET=8 TC_BITS=8 ZONE_BITS=0 cures that problem. I've another/next, Setting up Accept Routing Advertisements... Adding Providers... RTNETLINK answers: File exists ERROR: Command "/sbin/ip -6 route add table 1 fe80::/64 dev eth0 proto kernel metric 256 pref medium" Failed Restoring Shorewall6 Lite... which, IIUC, is unrelated to the Mark/Mask. ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users