From dd8251468efd75e1061df73a0c8689d73c201acb Mon Sep 17 00:00:00 2001 From: Vladimir Avtsenov Date: Tue, 11 Feb 2025 13:22:18 +0300 Subject: [PATCH] masquerade only marked packets --- netfilter-helper/interface-to-ipset.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/netfilter-helper/interface-to-ipset.go b/netfilter-helper/interface-to-ipset.go index bfd5827..aafc187 100644 --- a/netfilter-helper/interface-to-ipset.go +++ b/netfilter-helper/interface-to-ipset.go @@ -90,7 +90,7 @@ func (r *IfaceToIPSet) PutIPTable(table string) error { return fmt.Errorf("failed to clear chain: %w", err) } - err = r.IPTables.AppendUnique("nat", postroutingChainName, "-o", r.IfaceName, "-j", "MASQUERADE") + err = r.IPTables.AppendUnique("nat", postroutingChainName, "-m", "mark", "--mark", strconv.Itoa(int(r.mark)), "-j", "MASQUERADE") if err != nil { return fmt.Errorf("failed to create rule: %w", err) }