| 123456789101112131415161718 |
- This module copies security markings from packets to connections
- (if unlabeled), and from connections back to packets (also only
- if unlabeled). Typically used in conjunction with SECMARK, it is
- valid in the
- .B security
- table (for backwards compatibility with older kernels, it is also
- valid in the
- .B mangle
- table).
- .TP
- \fB\-\-save\fP
- If the packet has a security marking, copy it to the connection
- if the connection is not marked.
- .TP
- \fB\-\-restore\fP
- If the packet does not have a security marking, and the connection
- does, copy the security marking from the connection to the packet.
|
