This module copies security markings from packets to connections

(if unlabeled), and from connections back to packets (also only

if unlabeled).  Typically used in conjunction with SECMARK, it is

valid in the

.B security

table (for backwards compatibility with older kernels, it is also

valid in the

.B mangle

table).

.TP

\fB\-\-save\fP

If the packet has a security marking, copy it to the connection

if the connection is not marked.

.TP

\fB\-\-restore\fP

If the packet does not have a security marking, and the connection

does, copy the security marking from the connection to the packet.