Mangle: Prerouting, Forward, Packet mark, connection mark?

[rado3105]

Ako vyzeraju vase mangle?
Pouzivate Prerouting, postrouting alebo radsej forward (aky je medzi nimi rozdiel - pointa, flowgraph som si pozrel...).
Rozdiel medzi connection mark a packet mark - co je lepsie pouzit obe alebo samostatne?

[Maxik]

router 2 etery, NAT, jen forward, conn mark nakonec paket mark > qtree smitec. sq pocitadlo dat.

[rado3105]

No nepochopil som toho moc co si napisal....

[Noxus28]

Kód: Vybrat vše

dd action=mark-packet chain=forward disabled=no dst-address=192.168.21.0/24 \
    in-interface=ether1_WAN new-packet-mark=vlan21_down passthrough=no \
    src-address=0.0.0.0/0
add action=mark-packet chain=forward disabled=no dst-address=0.0.0.0/0 \
    new-packet-mark=vlan21_up out-interface=ether1_WAN passthrough=no \
    src-address=192.168.21.0/24

con. mark nepouzivame