0

I want to add connmark match with mark match in single iptable rule. I can add these rules individually, 

iptables -t mangle -I INPUT -j ACCEPT -i eth2 -m connmark --mark 0x1/0xf
iptables -t mangle -I INPUT -j ACCEPT -i eth2 -m mark --mark 0x1/0xf

But while adding below rule, it throws error.

iptables -t mangle -I INPUT -j ACCEPT -i eth2 -m mark --mark 0x1/0xf -m connmark --mark 0x1/0xf

Error: iptables v1.4.7: mark: "--mark" option may only be specified once
Try `iptables -h' or 'iptables --help' for more information.

Is this supported in iptables? Or I'm doing something wrong?

Improve this question

1 Answer 1

Reset to default
0

Sorry guys for trouble. I've found solution for this case. It has been fixed in 1.4.8.

http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.8.txt

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .