> Why the interface need to be in 'default route'? Thanks. As sugested by a private reply, i've disabled 'rp_filter' and packet flow correctly. AFAI've understood, packet get routed correctly to the intended interface, but when reply come back the reverse path filter interpret it as 'impossible' (because there's no a forward route, and this is true indeed), and filter it away. There's some 'smarter' way, or fine-grained way, or i have to disable rp_filter as the only option? Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)