Skip to content

5.4.96 arm64 kernel,ip rule with fwmark not work #16

@sjq1269762851

Description

@sjq1269762851
  1. Check whether the policy routing and MARK are set to -----, but they do not take effect
    image

  2. It is necessary to clarify which step is the problem, and the default route in the main table can be determined by capturing the packet, and the default route to utun7 can be diverted by adding a default route to utun7 in the main table. ----- Confirm that the main table is gone

  3. Then it is possible that the conditions for matching the 1001 table are not met, that is to say, the fwmark is not met, so a policy route is added at the front, and the 1001 table is unconditionally selected, and it will also return to normal at this time. ------ It means that the mark matching of the policy route is invalid

  4. Then there is a problem in the mangle table of netfilter, which means that it may be a failure to mark ------ it may be a problem with netfilter

  5. Mark the log on the filter table, if you mark the mangle, the content will be recorded in the kernel log, which shows that the netfilter is marked, indicating that there may be a problem with the fwmark matching of the policy route----- There is a problem with positioning the IP rule

image

So I didn't catch the package for IPv6 on utun7

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions