You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
19 lines
590 B
19 lines
590 B
This module copies security markings from packets to connections
|
|
(if unlabeled), and from connections back to packets (also only
|
|
if unlabeled). Typically used in conjunction with SECMARK, it is
|
|
valid in the
|
|
.B security
|
|
table (for backwards compatibility with older kernels, it is also
|
|
valid in the
|
|
.B mangle
|
|
table).
|
|
.TP
|
|
\fB\-\-save\fP
|
|
If the packet has a security marking, copy it to the connection
|
|
if the connection is not marked.
|
|
.TP
|
|
\fB\-\-restore\fP
|
|
If the packet does not have a security marking, and the connection
|
|
does, copy the security marking from the connection to the packet.
|
|
|