Hi Patrick, Sincere thanks for your time & help! > i assume you mean CONFIG_IP_ROUTE_FWMARK and not > CONFIG_IP_NF_TARGET_MARK. Yup -- sorry! > i would start with putting some printks in ipt_local_hook > (net/ipv4/netfilter/iptable_mangle.c) before the call to ip_route_me_harder > and in ip_route_me_harder (net/core/netfilter.c) itself. Trying this today ... Kindest Regards Charles Shick