search for: droopy

...I don''t seem to get my head round marks ... I try to mark p2p packets generated on the firewall in the output chain and then try to match that mark either in NAT OUTPUT or POSTROUTING I don''t seem to get the expected result. Any help or clue would be more than welcome. root@droopy:~/firewall > iptables-view -t mangle Chain PREROUTING (policy ACCEPT 33890 packets, 16M bytes) num pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 24751 packets, 12M bytes) num pkts bytes target prot opt in out source destination Chai...

...SAVE:T 0.0.0.0/0 0.0.0.0/0 all - - - !0 ------------------------------------------------------------------------ but shorewall show mangle gives : ------------------------------------------------------------------------ Shorewall 3.4.0-RC1 Mangle Table at droopy - Thu Jan 25 12:06:47 GMT 2007 Counters reset Thu Jan 25 11:41:20 GMT 2007 Chain PREROUTING (policy ACCEPT 21911 packets, 7207K bytes) pkts bytes target prot opt in out source destination 215 36310 CONNMARK 0 -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK match !0...