connmark and conntrack_ftp

Patrick McHardy kaber at
Wed Jul 4 17:03:11 CEST 2007

Elie Roux wrote:
> Hello,
> I'm working with Netfilter to build a system making QoS according to the
> mark of a connection. It works well with filters on the port and the ip,
> but I'd like to build something more efficient based on conntrack-*
> (ftp, irc, etc.). The problem is that I don't think it is possible right
> now. For example I have a ftp connection that have mark 2, and I'd like
> related connections to get mark 2 too.
> Am I wrong when I say it is impossible ? Would it be possible to add it ?

Not sure which example you're referring to. RELATED connection inheirit
the mark from the master.

More information about the netfilter-devel mailing list