Re: iptables mark target

[Blair L Strang <bls@nanocorp.net.nz>]

Frank Remetter wrote:

> Hey,
>
> i use the mark target for outbound shaping, but i am not sure, wether the 
> chain will be left if a rule matches or not. In other words in which 
> direction do i have to set up the rules?
> first match apply oder last match?

The whole table is traversed[1], in the order that "iptables -t mangle
-L" lists the rules.  The last rule to mark a given packet wins.

Regards,

    Blair.

[1] Unless you use a '-j RETURN' target in your rules.