Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to add connmark match with mark match in single iptable rule. I can add these rules individually,

iptables -t mangle -I INPUT -j ACCEPT -i eth2 -m connmark --mark 0x1/0xf
iptables -t mangle -I INPUT -j ACCEPT -i eth2 -m mark --mark 0x1/0xf

But while adding below rule, it throws error.

iptables -t mangle -I INPUT -j ACCEPT -i eth2 -m mark --mark 0x1/0xf -m connmark --mark 0x1/0xf

Error: iptables v1.4.7: mark: "--mark" option may only be specified once
Try `iptables -h' or 'iptables --help' for more information.

Is this supported in iptables? Or I'm doing something wrong?

share|improve this question

1 Answer 1

Sorry guys for trouble. I've found solution for this case. It has been fixed in 1.4.8.

http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.8.txt

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.