Hi all.
In my mangle chain, I use a list of rule like this:
#I mark the connection
add action=mark-connection chain=forward new-connection-mark=P2P-CONN p2p=all-p2p passthrough=yes #I mark packets for the connection
add action=mark-packet chain=forward connection-mark=P2P-CONN new-packet-mark=P2P passthrough=no
Is it better, in the first rule, mark only NEW connection (i.e. adding connection-state=new) ?
If is the same this is true also for udp connections ?
actually, in general ‘p2p’ matcher catches connections not from the first packet, so ‘connection-state=established’ may be caught too
by the way, you may split your rule into two rules (with connection-state=new and connection-state=established) and see, how many packets will be caught by each one