In article <200410310839.25812.jason@jeetkunedomaster.net> you wrote: > http' I can route all traffic from my laptop w/o issues. If mark all laptop > traffic and I use 'ip rule add fwmark 0x50 table http' it doesn't work. Which > really should do exactly the same thing as far as the routing is concerned. You reported that TCPDump of the request flow looks ok (I asume you also checked source/destination ip and ports, and mac)). And that you also see the response from peer. Since I also asume that the back route to the laptop is a simple static entry:(**) the problem may be with the FIB cache for that particular flow. Can you see what "route -C -ee"* tells you about that connection in both cases (while data flows). Greetings Bernd (*) not sure if there is also a iproute2 command for that, but you may also want to run "ip monitor all" while you establish the flow to see if cached routes are added. (**) however if you feel unsure, please provide us with the tcpdump of the syn request and the syn/ack response. - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html