> Actually, it is more subtle than that. The 'src' *does* specify the source > IP to put in the packet *if* the packet doesn't have a source IP yet. This > only holds true for packets generated locally. Then why does it not work together with the fwmark policer? > It does not. The ip rule does that. Routing does not mangle packets, unless > the packet is locally generated and incomplete. it is generated locally in my case. - Thilo Schulz