1 This module copies security markings from packets to connections 2 (if unlabeled), and from connections back to packets (also only 3 if unlabeled). Typically used in conjunction with SECMARK, it is 4 valid in the 5 .B security 6 table (for backwards compatibility with older kernels, it is also 7 valid in the 8 .B mangle 9 table). 10 .TP 11 \fB\-\-save\fP 12 If the packet has a security marking, copy it to the connection 13 if the connection is not marked. 14 .TP 15 \fB\-\-restore\fP 16 If the packet does not have a security marking, and the connection 17 does, copy the security marking from the connection to the packet. 18 19
