Jason Dixon wrote: > been processed by translation rules. Tags are "sticky", meaning that > the packet will be tagged even if the rule is not the last matching > rule. Further matching rules can replace the tag with a new one but > will not remove a previously applied tag. A packet is only ever > assigned one tag at a time. pass rules that use the tag
I found this confusing: "The packet will be tagged even if the rule is not the last matching rule." "Further matching rules can replace the tag with a new one" "but will not remove a previously applied tag." "A packet is only ever assigned one tag at a time." I take this to mean that you can not have a rule that untags a tagged packet. You can have a rule that overwrites the tag on a packet. In fact, any rule that tags a packet unconditionally overwrites the existing tag. Is this correct? The way the man page is written, I see some ambiguity over what happens when a packet gets tagged, and then matches a subsequent rule that applies its own tag. I'd write it as "Tags are 'sticky', meaning that the packet will be tagged even if the rule is not the last matching rule. Further matching rules can overwrite the existing tag. Once a packet is tagged, it can not be untagged. A packet can only be assigned one tag at a time." Mike
