What is the correct way to get the connection marker ( -j CONNMARK --restore-mark)?

Question

linux

There is a server distributing network 192.168.2.0/24
It has an openvpn connection, network 10.8.1.0/24
eth0 192.168.2.1
tun0 10.8.1.6 I am
marking connections for a specific ip of the local network

iptables -I FORWARD -m conntrack --ctorigsrc 192.168.2.11 --ctproto tcp -j CONNMARK --set-mark 99

But I don’t know how to get this token on the openvpn server 10.8.1.1 Tell me
how to do it right.

Answer 1

packet marking only works within the host