hello ALL The source address remains the same after fwmark rerouting (route_me_harder) as it was before netfilter local_out hooks because in route_me_harder() function source address was taken from ip-header (iph->saddr) -- not from bind() address or via IP_PKTINFO this address must be saved in sock sk (like rcv_saddr) or something else in kernel. I should white patch but I not shure that my decision is right. ========= Vasilenko Roman aka Firewalker ============ _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/