Is it possible to use masks in the selection of a firewall mark for a filter? ipchains --source-port 53 --mark 5 ipchains --source-port 80 --mark 6 Then, filter traffic into a CBQ queue against a mask of '4', which (would) include both rules, filter certain traffic into a class based on 5 or 6 ... ?? -- Michael T. Babcock