iptables 1.3.1 MARK target

Pablo Neira pablo at eurodev.net
Thu Mar 17 23:04:19 CET 2005


Graham Keeling wrote:
> Hi,
> I'm posting this in case you guys aren't aware of it...
> 
> I'm using kernel 2.4.26.
> I recently upgraded iptables from 1.2.8 to 1.3.1.
> I found that the MARK target didn't work anymore.
> I couldn't do --set-mark, --or-mark or --and-mark.
> The error messages were;
> --set-mark: invalid argument
> --or-mark: kernel too old for --or-mark
> --and-mark: kernel too old for --and-mark

that's right since versioning stuff was pushed forward into kernel 
mainline, now we can extend current matches and target ensuring backward 
compatibility. If you want to use those parameters you must upgrade your 
kernel.

--
Pablo



More information about the netfilter-devel mailing list