Marks set in PREROUTING got lost

Jan Engelhardt jengelh at
Fri Sep 29 08:15:03 CEST 2006

>> You have to mark it in the PREROUTING chain of the mangle table, to be 
>> able to match on it within the PREROUTING chain of the nat table.
>Is this also true, if I jump from PREROUTING mangle in a user
>defined chain and mark my packets there?

Just make sure it gets marked in a table/chain (or subchain thereof) 
before the nat-PREROUTING chain is hit, according to

Jan Engelhardt

More information about the netfilter mailing list