MarkMatch

class MarkMatch

Match against the fwmark

mark() → MarkCriterion

Match against the packet’s fwmark.

to_iptables_args() → List[str]

Returns iptables(8) arguments for this match

---

MarkCriterion

class MarkCriterion(match: Match)

A criterion for a mark, used by MarkMatch and ConnmarkMatch since the iptables(8) option used by the mark/connmark modules is the same.

The comparison value is a tuple consisting of an (integer) mark value and an integer mask value (None in case of no mask).

compare(is_equal: bool, *args, **kwargs) → Match

Alternative method used for comparisons. It invokes equals() (or not_equals()) with args and kwargs if is_equal is True (or False).

equals(mark: int, mask: Optional[int] = None) → Match

Check for equality against mark and optionally mask

Parameters:

• mark – the mark value

• mask – the mask value

get_value()

Returns the value that the criterion is comparing against.

Return type:

tuple of (int, int|None)

is_positive() → bool

Returns the ‘polarity’ of the criterion; True for equals() or False for not_equals()

Raises IptablesError if the criterion is not set

is_set() → bool

Returns True if the criterion has been set

not_equals(*args, **kwargs) → Match

Express inequality comparison against the argument values.

The method implementation in this class invokes the equals() method and then reverses the polarity; subclasses should not need to override it.

Subclasses overriding this method should invoke the _set_polarity() method of this class to set the polarity to False.

Returns this object.

to_iptables_args() → List[str]

Returns a list of iptables(8) arguments