Hi all,
I’m having a difficult time understanding the requirements for mangle to mark a connection on a RB2011UAS-2HnD running 6.20
I’ve noticed that it will only mark connections that are both Assured, and tcp-state = established
Using the following mangle rule:
chain=prerouting action=mark-connection new-connection-mark=Asus_con passthrough=yes
connection-state=new protocol=tcp src-address=10.0.0.101 dst-port=9000 log=no log-prefix=“”
However, other mangle rules are able to mark connections that are Unreplied but established (6) as well as connections that are Assured but not established (4). But yet some connections will remain unmarked while they are Assured and not established, same state as (4) but they are not marked! (see top image)
mangle rules for marked connections: 4 + 6
chain=prerouting action=mark-connection new-connection-mark=GAMING_con passthrough=yes
dst-address-list=games log=no log-prefix=“”
chain=prerouting action=mark-connection new-connection-mark=HTTP passthrough=yes connection-state=new
protocol=tcp port=80,443 log=no log-prefix=“”
Can anyone shed some light on why mangle is deciding not to mark some connections?