|
Packit Service |
d1fe03 |
This module sets the netfilter mark value associated with a connection. The
|
|
Packit Service |
d1fe03 |
mark is 32 bits wide.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-set\-xmark\fP \fIvalue\fP[\fB/\fP\fImask\fP]
|
|
Packit Service |
d1fe03 |
Zero out the bits given by \fImask\fP and XOR \fIvalue\fP into the ctmark.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-save\-mark\fP [\fB\-\-nfmask\fP \fInfmask\fP] [\fB\-\-ctmask\fP \fIctmask\fP]
|
|
Packit Service |
d1fe03 |
Copy the packet mark (nfmark) to the connection mark (ctmark) using the given
|
|
Packit Service |
d1fe03 |
masks. The new nfmark value is determined as follows:
|
|
Packit Service |
d1fe03 |
.IP
|
|
Packit Service |
d1fe03 |
ctmark = (ctmark & ~ctmask) ^ (nfmark & nfmask)
|
|
Packit Service |
d1fe03 |
.IP
|
|
Packit Service |
d1fe03 |
i.e. \fIctmask\fP defines what bits to clear and \fInfmask\fP what bits of the
|
|
Packit Service |
d1fe03 |
nfmark to XOR into the ctmark. \fIctmask\fP and \fInfmask\fP default to
|
|
Packit Service |
d1fe03 |
0xFFFFFFFF.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-restore\-mark\fP [\fB\-\-nfmask\fP \fInfmask\fP] [\fB\-\-ctmask\fP \fIctmask\fP]
|
|
Packit Service |
d1fe03 |
Copy the connection mark (ctmark) to the packet mark (nfmark) using the given
|
|
Packit Service |
d1fe03 |
masks. The new ctmark value is determined as follows:
|
|
Packit Service |
d1fe03 |
.IP
|
|
Packit Service |
d1fe03 |
nfmark = (nfmark & ~\fInfmask\fP) ^ (ctmark & \fIctmask\fP);
|
|
Packit Service |
d1fe03 |
.IP
|
|
Packit Service |
d1fe03 |
i.e. \fInfmask\fP defines what bits to clear and \fIctmask\fP what bits of the
|
|
Packit Service |
d1fe03 |
ctmark to XOR into the nfmark. \fIctmask\fP and \fInfmask\fP default to
|
|
Packit Service |
d1fe03 |
0xFFFFFFFF.
|
|
Packit Service |
d1fe03 |
.IP
|
|
Packit Service |
d1fe03 |
\fB\-\-restore\-mark\fP is only valid in the \fBmangle\fP table.
|
|
Packit Service |
d1fe03 |
.PP
|
|
Packit Service |
d1fe03 |
The following mnemonics are available for \fB\-\-set\-xmark\fP:
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-and\-mark\fP \fIbits\fP
|
|
Packit Service |
d1fe03 |
Binary AND the ctmark with \fIbits\fP. (Mnemonic for \fB\-\-set\-xmark
|
|
Packit Service |
d1fe03 |
0/\fP\fIinvbits\fP, where \fIinvbits\fP is the binary negation of \fIbits\fP.)
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-or\-mark\fP \fIbits\fP
|
|
Packit Service |
d1fe03 |
Binary OR the ctmark with \fIbits\fP. (Mnemonic for \fB\-\-set\-xmark\fP
|
|
Packit Service |
d1fe03 |
\fIbits\fP\fB/\fP\fIbits\fP.)
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-xor\-mark\fP \fIbits\fP
|
|
Packit Service |
d1fe03 |
Binary XOR the ctmark with \fIbits\fP. (Mnemonic for \fB\-\-set\-xmark\fP
|
|
Packit Service |
d1fe03 |
\fIbits\fP\fB/0\fP.)
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-set\-mark\fP \fIvalue\fP[\fB/\fP\fImask\fP]
|
|
Packit Service |
d1fe03 |
Set the connection mark. If a mask is specified then only those bits set in the
|
|
Packit Service |
d1fe03 |
mask are modified.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-save\-mark\fP [\fB\-\-mask\fP \fImask\fP]
|
|
Packit Service |
d1fe03 |
Copy the nfmark to the ctmark. If a mask is specified, only those bits are
|
|
Packit Service |
d1fe03 |
copied.
|
|
Packit Service |
d1fe03 |
.TP
|
|
Packit Service |
d1fe03 |
\fB\-\-restore\-mark\fP [\fB\-\-mask\fP \fImask\fP]
|
|
Packit Service |
d1fe03 |
Copy the ctmark to the nfmark. If a mask is specified, only those bits are
|
|
Packit Service |
d1fe03 |
copied. This is only valid in the \fBmangle\fP table.
|