But how can I bind these rules to a interface when I don't know to what interface the locally generated packets will arrive? In fact, this is the purpose of marking the packets: to route them to the ppp0 interface. - catalin - ----- Original Message ----- From: "???????? ?????" <skekes@xxxxxxxxxx> To: "Catalin Borcea" <catalin@xxxxxxxxxxxxxxxxxxxx> Cc: <lartc@xxxxxxxxxxxxxxx> Sent: Thursday, July 17, 2003 9:37 AM Subject: Re: [LARTC] OUTPUT chain marking after or before routing? > Well catalin, try to add theese rules with the in the prerouting chain > but bind theese rules with the interfaces you have. > Without binding netfilter rules with interfaces it will not work, and > you'll get the results you allready got. > Catalin Borcea wrote: > > >Hello, > >I tried to mark the packets in the PREROUTING chain but still doesn't work. > >Now the packets are no marked anymore when they go out by the eth2 > >interface. When I marked them in the OUTPUT chain they arrived also to the > >eth2 interface but marked. According to the docs the PREROUTING chain is not > >traversed by locally generated packets so, I don't know how this works for > >you. Maybe you have forwarded packets and not locally generated packets. > > > > > > > >
