[Nufw-devel] Re: [PATCH] Add mark to packet from libipq

[Henrik Nordstrom]

On Thu, 16 Oct 2003, Eric Leblond wrote:

> > but in reality this is not needed either as the userspace knows the
> > original mask and can a apply whatever transformations it likes 
> > when giving the new verdict mask.
> 
> How could userspace knows it ?

It got the mark with the packet in packet_msg->mark, so the userspace
application can just apply the transformation it likes when setting the
verdict.

Example using mask operation

   mark = newvalue | (packet_msg->mark & mask);

but obviously other transformations is possible as well.

Regards
Henrik