Hi, I'll update my message to make it more clear: I need to change the Source IP of incoming packets in PREROUTING. I'm implementing a tunnel like protocol. I'm intercepting the packets with an NFQUEUE in mangle table. When I change the Source IP or Protocol and return the packet with ACCEPT or REPEAT verdict it disappears. If I put my hook in INPUT (to handle the packets that are sent to the host) the applications get the packet but with the "old" IP. About packets that are going to be routed: If I change them in PREROUTING and change the Source IP I lose them. But I have to change the Destination there or the router will use the "old" IP for routing. I can change the destination in PREROUTING and the source in FORWARDING but it's ugly (and it's only a fix for these packets, I couldn't find a fix for packets sent to the host). I'm using the last version of libnetfilter_queue I'd appreciate any help here because I'm depending on this to advance with a prototype I need for my thesis, thanks! Regards, Damian -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html