Hi, My setup is: LAN --(eth0)-- GW/FW --(ppp0)-- Internet How to distinguish incoming traffic to the gateway from the traffic to the LAN ? I'm using 'iptables -t mangle -A PREROUTING -j IMQ -i ppp0' to send incoming traffic to imq0 Now I would like to put incoming traffic to the gateway and incoming traffic to the lan in two different classes. I tried 'iptables -t mangle -A POSTROUTING -o eth0 -m mark --mark 0x1 -j IMQ' and 'iptables -t mangle -A FORWARD -i ppp0 -o eth0 -j MARK --set-mark 0x1' But it's wrong because the incoming traffic to the LAN goes twice to imq0. Is there a way to do that correctly ? -- S.
