Marco Gaiarin <gaio@xxxxxxxxx> wrote: > > Yes, however, mangle OUTPUT will re-route in case of fwmark change. > > A-HA! Seemed a bit too strange to me... i've tried with: > > iptables -t mangle -I OUTPUT -d $gip -p tcp -m multiport --dports ${TCP_PORTS} -m mark --mark 0/$MASK -j MARK --set-mark $MARK/$MASK Works for me. > and does not work; you say me that i've to use: > > iptables -t mangle -I OUTPUT -d $gip -p tcp -m multiport --dports ${TCP_PORTS} -j MARK --set-mark $MARK/$MASK > > (eg: ignore eventually 'implicit' mark set by the routing decision) to > make it work? Whats an implicit mark set by the routign decision? > 're-route' happen automatically? Yes, if mark or other attibutes (e.g. dscp) changed.