Mangle: Prerouting, Forward, Packet mark, connection mark?

Ako vyzeraju vase mangle?

Pouzivate Prerouting, postrouting alebo radsej forward (aky je medzi nimi rozdiel - pointa, flowgraph som si pozrel...).

Rozdiel medzi connection mark a packet mark - co je lepsie pouzit obe alebo samostatne?

router 2 etery, NAT, jen forward, conn mark nakonec paket mark > qtree smitec. sq pocitadlo dat.

No nepochopil som toho moc co si napisal....

dd action=mark-packet chain=forward disabled=no dst-address=192.168.21.0/24 \

in-interface=ether1_WAN new-packet-mark=vlan21_down passthrough=no \

src-address=0.0.0.0/0

add action=mark-packet chain=forward disabled=no dst-address=0.0.0.0/0 \

new-packet-mark=vlan21_up out-interface=ether1_WAN passthrough=no \

src-address=192.168.21.0/24

con. mark nepouzivame