passthrough - ignore this rule and go to next one (useful for statistics).

This kind of marks is used for policy routing purposes only

mark-routing - place a mark specified by the new-routing-mark parameter on a packet.

mark-packet - place a mark specified by the new-packet-mark parameter on a packet that matches the rule.

mark-connection - place a mark specified by the new-connection-mark parameter on the entire connection that matches the rule.

After packet is matched it is passed to next rule in the list, similar as passthrough

log - add a message to the system log containing following data: in-interface, out-interface, src-mac, protocol, src-ip:port->dst-ip:port and length of the packet.

jump - jump to the user defined chain specified by the value of jump-target parameter.

clear-df - clear 'Do Not Fragment' Flag.change-ttl - change Time to Live field value of the packet to a value specified by the new-ttl parameter.change-mss - change Maximum Segment Size field value of the packet to a value specified by the new-mss parameter.change-dscp - change Differentiated Services Code Point (DSCP) field value specified by the new-dscp parameter.add-src-to-address-list - add source address to Address list specified by address-list parameter.add-dst-to-address-list - add destination address to Address list specified by address-list parameter.Packet is not passed to next firewall rule. The mangle marks exist only within the router, they are not transmitted across the network.Īdditionally, the mangle facility is used to modify some fields in the IP header, like TOS (DSCP) and TTL fields.Īction to take if packet is matched by the rule: They identify a packet based on its mark and process it accordingly. Many other facilities in RadioOS make use of these marks, e.g. Mangle is a kind of 'marker' that marks packets for future processing with special marks.

Wireshark tzsp