On Nov 25 2007 18:11, Patrick McHardy wrote: > > # route based on available bandwidth > iptables -t mangle -A BALANCE -m helper --helper ftp \ > -m connmark --mark 0x0 \ > -m rateest --rateest-delta \ > --rateest1 eth0 \ > --rateest-bps1 2.5mbit \ > --rateest-gt \ > --rateest2 ppp0 \ > --rateest-bps2 2mbit \ > -j CONNMARK --set-mark 0x1 > Ah gotcha. I smell an implicit -m conntrack --ctstate NEW :-) - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html