Hiyas, I am interested in performing some packet mangling, preferably in a Userspace QUEUE. My general goal is to obfuscate packet contents (IP payload and below) 'on the wire' between 2 hosts which both have the QUEUE application, so: HostA | (Normal packet) FW Router | | (Mangled packet) | FW Router | (Normal packet) HostB Since I want to mangle the IP payload (including tcp/udp header), I was curious about where I could do it so that it was demangled before I do filtering rules and before any connection tracking was performed. If I establish a QUEUE for the mangle PREROUTING and de-mangle an incoming packet, will that make the contents of the unmangled packet available for INPUT and connection tracking? -Scott __________________________________________________ Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more http://platinum.yahoo.com