Hello I have a server with a dsl connection on eth1 and local interface eth0. Because of the NAT i cannot direct traffic to IMQ device in PREROUTING chain but have to use INPUT and FORWARD. So i use rules. iptables -t mangle -A INPUT -i eth1 -j IMQ --todev 0 iptables -t mangle -A FORWARD -i eth1 -j IMQ --todev 0 And now the strange thing: FORWARD traffic gets directed nicely to the IMQ, but INPUT *doesn't* ! To be just sure i removed "FORWARD" line and left only the "INPUT" (other mangle rules were removed) Chain INPUT (policy ACCEPT 3511 packets, 2753307 bytes) pkts bytes target prot opt in out source destination 343 439847 IMQ all -- eth1 any anywhere anywhere IMQ: todev 0 But when i check IMQ0 using ifconfig: imq0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 UP RUNNING NOARP MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:30 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) i see there is no traffic going through this device! Anyone knows how can it be possible ? -- best regards, Marcin 'Yans' Bazarnik yans@xxxxxxxxxx