Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

5.4.96 arm64 kernel,ip rule with fwmark not work #16

Open
sjq1269762851 opened this issue Nov 22, 2023 · 0 comments
Open

5.4.96 arm64 kernel,ip rule with fwmark not work #16

sjq1269762851 opened this issue Nov 22, 2023 · 0 comments

Comments

@sjq1269762851
Copy link

  1. Check whether the policy routing and MARK are set to -----, but they do not take effect
    image

  2. It is necessary to clarify which step is the problem, and the default route in the main table can be determined by capturing the packet, and the default route to utun7 can be diverted by adding a default route to utun7 in the main table. ----- Confirm that the main table is gone

  3. Then it is possible that the conditions for matching the 1001 table are not met, that is to say, the fwmark is not met, so a policy route is added at the front, and the 1001 table is unconditionally selected, and it will also return to normal at this time. ------ It means that the mark matching of the policy route is invalid

  4. Then there is a problem in the mangle table of netfilter, which means that it may be a failure to mark ------ it may be a problem with netfilter

  5. Mark the log on the filter table, if you mark the mangle, the content will be recorded in the kernel log, which shows that the netfilter is marked, indicating that there may be a problem with the fwmark matching of the policy route----- There is a problem with positioning the IP rule

image

So I didn't catch the package for IPv6 on utun7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant