From 6accb50ca7fe6261d7dd492e386e35d5f1231334 Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Wed, 2 May 2007 14:24:19 +0000
Subject: [PATCH] Fix mask used in connmark manipulation

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@6189 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 Shorewall-perl/Shorewall/Providers.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Shorewall-perl/Shorewall/Providers.pm b/Shorewall-perl/Shorewall/Providers.pm
index d226191d4..05398d1b0 100644
--- a/Shorewall-perl/Shorewall/Providers.pm
+++ b/Shorewall-perl/Shorewall/Providers.pm
@@ -61,7 +61,7 @@ my @providers;
 # Set up marking for 'tracked' interfaces. Unline in Shorewall 3.x, we add these rules unconditionally, even if the associated interface isn't up.
 #
 sub setup_route_marking() {
-    my $mask    = $config{HIGH_ROUTE_MARKS} ? '0xFFFF' : '0xFF';
+    my $mask    = $config{HIGH_ROUTE_MARKS} ? '0xFF00' : '0xFF';
     my $mark_op = $config{HIGH_ROUTE_MARKS} ? '--or-mark' : '--set-mark';
 
     require_capability( 'CONNMARK_MATCH' , 'the provider \'track\' option' );