After few hours of looking, I couldn't find a way to combine ("and") different filters. Example: I need to police ingress traffic coming from certain source IPs (which are best expressed with u32 filter) and going to certain routes (which are best expressed with route filter). What I was trying to do (thinking that parent: will only match packets passed by the previous filter, but I was mistaken). tc filter add dev eth0.501 parent ffff: prio 1 protocol ip route to 10 classid ffff:10 tc filter add dev eth0.501 parent ffff:10 protocol ip prio 50 \ u32 match ip src xxxx flowid ffff:20 action .... _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/