From 80f8b3a6d86bb15b2dca73ad50371a54cb3e5cad Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 13 Aug 2013 16:58:33 +0200
Subject: socket-default: Allow setting firewall mark on outbound packets

---
 .../plugins/socket_default/socket_default_socket.c     | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

(limited to 'src/libcharon/plugins/socket_default/socket_default_socket.c')

diff --git a/src/libcharon/plugins/socket_default/socket_default_socket.c b/src/libcharon/plugins/socket_default/socket_default_socket.c
index 3aa09bef8..ea976dfe9 100644
--- a/src/libcharon/plugins/socket_default/socket_default_socket.c
+++ b/src/libcharon/plugins/socket_default/socket_default_socket.c
@@ -611,6 +611,24 @@ static int open_socket(private_socket_default_socket_t *this,
 			return -1;
 		}
 	}
+#ifdef SO_MARK
+	{	/* set optional MARK on socket (requires CAP_NET_ADMIN) */
+		char *fwmark;
+		mark_t mark;
+
+		fwmark = lib->settings->get_str(lib->settings,
+						"%s.plugins.socket-default.fwmark", NULL, charon->name);
+		if (fwmark && mark_from_string(fwmark, &mark))
+		{
+			if (setsockopt(skt, SOL_SOCKET, SO_MARK, &mark.value,
+						   sizeof(mark.value)) < 0)
+			{
+				DBG1(DBG_NET, "unable to set SO_MARK on socket: %s",
+					 strerror(errno));
+			}
+		}
+	}
+#endif
 
 	if (!hydra->kernel_interface->bypass_socket(hydra->kernel_interface,
 												skt, family))
-- 
cgit v1.2.3