/ip firewall mangle
add action=mark-connection chain=prerouting in-interface=ether2_client1 new-connection-mark=client1 passthrough=yes
add action=mark-connection chain=postrouting new-connection-mark=client1 out-interface=ether2_client1 passthrough=yes
add action=mark-connection chain=prerouting in-interface=ether3_client2 new-connection-mark=client2 passthrough=yes
add action=mark-connection chain=postrouting new-connection-mark=client2 out-interface=ether3_client2 passthrough=yes
....
This is the first time 9(albeit in my very limited experience) that I have seen mangle rules do the following two things.
a. go from mark-connection chain to a subsequent mark connection chain (I guess it must be possible when using passthrough=yes)??
b. use
THE SAME new-connection-mark name (client1) in two mangle rules that are both mark connection chain rules ???
Is this legal LOL???
In terms of functionality (words not solution) what is being done to the packets here......... and how is there no conflict??