Hello, On Sat, 27 Apr 2002, Thilo Schulz wrote: > > It does not. The ip rule does that. Routing does not mangle packets, unless > > the packet is locally generated and incomplete. > > it is generated locally in my case. May be your problem is that LOCALOUT is after routing, the socket already created connected route and is bound to specific src IP. It is too late to mark packets just to select different src IP via routing. May be you have to use SNAT to change the src IP to the desired one. I didn't tried it and I don't know whether it works. And I see in recent sources some funny things, for example, ipt_local_hook(MANGLE) calls ip_route_me_harder from LOCAL_IN but I'm not sure it will hurt your tests. May be you can ask for new LOCAL_ROUTING hook where MANGLE can select different src IP for different users before route connection :))) > - Thilo Schulz Regards -- Julian Anastasov <ja@ssi.bg>