1This module copies security markings from packets to connections
2(if unlabeled), and from connections back to packets (also only
3if unlabeled).  Typically used in conjunction with SECMARK, it is
4only valid in the
5.B mangle
6table.
7.TP
8.B --save
9If the packet has a security marking, copy it to the connection
10if the connection is not marked.
11.TP
12.B --restore
13If the packet does not have a security marking, and the connection
14does, copy the security marking from the connection to the packet.
15