libxt_CONNSECMARK.man revision e37d45ce390c2f5a7f1e64742b9100ecef0def54 
1This module copies security markings from packets to connections
2(if unlabeled), and from connections back to packets (also only
3if unlabeled).  Typically used in conjunction with SECMARK, it is
4valid in the
5.B security
6table (for backwards compatibility with older kernels, it is also
7valid in the
8.B mangle
9table).
10.TP
11\fB\-\-save\fP
12If the packet has a security marking, copy it to the connection
13if the connection is not marked.
14.TP
15\fB\-\-restore\fP
16If the packet does not have a security marking, and the connection
17does, copy the security marking from the connection to the packet.
18
19