Hello, i have a problem, maby one can help me with that. There is a iptables Box with 2 default routes. One hat dynamic IP (DSL), the other one owns a small inet /29 Net. The DSL route should be used, because of the flatrate on that line. The filterbox does DNAT to an host behind it on a private Net for ssh. Now, ssh from inet on the DSL line works fine. The Pakets get back the right way by the active default route. I also want to ssh in over the other interface, and want the packets back in that line. I am thinking about marking the incoming packets and then finding out about the returning packets some how. If this would work, the routing then can by done by ip rule (routing). How could this be done? Is there another solution for my problem. thx a lot, Axel