On Wednesday, 29 January 2003, at 14:35:41 +0200, Anton Yurchenko wrote: > is there a patch or a way to mark packets with IPtables marking based on > the nexthop for the packet? > You can mark packets on the FORWARD chain (mangle table), based on the outgoing interface (there should be a one-to-one association of outgoing interface to nexthop IP). iptables -t mangle -A FORWARD --out-interface eth0 --jump MARK --set-mark 1 Hope it helps. -- Jose Luis Domingo Lopez Linux Registered User #189436 Debian Linux Sid (Linux 2.4.20-xfsip)