[lxc-users] skb marks preserved inside container?

[Hyunseok]

Hi,

I was doing some experiment where I mark packets using iptables (i.e.,
--set-mark) on a host, and send the marked packets to a container running
on the host via bridge.

I noticed that the packet marking done on the host is not preserved across
the container boundary.  That is, the container does not see the packet
marks.
Is that an expected behavior?

-hs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20150220/09d6397f/attachment.html>