Hello! > Actually, there is asymmetry here. On the out path, we call > ip_route_output_key recursively Never! Recursive lookups are tabu. Actually, it is clear why. Policy must be predictable rather than something which requires resolution and even dead loop detection to be validated. Alexey - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html