1 :PREROUTING,FORWARD,OUTPUT,POSTROUTING 2 *mangle 3 -m connmark --mark 0xffffffff;=;OK 4 -m connmark --mark 0xffffffff/0xffffffff;-m connmark --mark 0xffffffff;OK 5 -m connmark --mark 0xffffffff/0;=;OK 6 -m connmark --mark 0/0xffffffff;-m connmark --mark 0;OK 7 -m connmark --mark -1;;FAIL 8 -m connmark --mark 0xfffffffff;;FAIL 9 -m connmark;;FAIL 10