Eli Cooper <elicooper@xxxxxxx> wrote: > AFAICT that's not the case: REDIRECT only rewrites daddr, but oif is > left untouched. Thats correct. For OUTPUT, expected behaviour is that 'route type chain' (nftables), respectively mangle OUTPUT -- records the route keys before consulting the ruleset and tests them for changes, then, if any key has changed (this includes skb->mark), mangle/route chain type call *_route_me_harder to re-lookup the route.