ok, i have tried applying the ip rule fwmark in hex but dont see any difference !.. The routing decission is take be4 the packets comes to OUTPUT table, if thats true then it will be not possible to route **owner** as per policy routing--am i right ?? if ys then how can one achieve **owner** based policy routing in linux box ?? Julian Anastasov wrote: > Hello, > > On Fri, 11 Oct 2002, Arindam Haldar wrote: > > >>50: from all fwmark 50 lookup ispA > > > fwmark in ip rule is 0x50 (it is defined and printed in hex) > > >>iptables -I OUTPUT -t mangle -m owner --uid-owner <squid> -d 202.0.0.0/8 >> -j MARK --set-mark 50 > > > and here 50 is 0x32 (not 0x50). Is that the problem? > > Regards > > -- > Julian Anastasov <ja@ssi.bg> > > >
