Hi all, I agree with Chris that the filter is now too limitative. Sometimes you need too many filters to classify and to shape some traffic. I belive that you have good pointed about that two directions: netfilter and queuing disciplines. I have been blocked for a few times to take a good action because the implementation from now is too limited. I think that we can go beyond that: a new approach about the packet flow - to create a descriptive language, a Packet Flow Language who can include concepts from both netfilter and queuing disciplines. With that kind of language you could be able to describe and to take actions about the way that a packet will pass through a Linux machine. For now it's just an ideea but i'm working for a draft. If you like the ideea I wait for you comments and suggestions. Cheers, Liviu