I have 2 (potentially N) upstream links, and one single netfilter box that handles all the routing from/to them. All routers are connected on the same network segment. This implies that all packets leave the netfilter box via the same interface (eth1). The main routing table holds about 139100 entries at the moment, with about 71500 routes via one router (let it be router A) and 67600 routes via the other one (router B). Is there a way to match packets, in the filter table, based on which router they will be routed to? I've googled a bit but wasn't able to find a way. Intuitively, matching should be done in the POSTROUTING chain, after the routing decision has been taken. I need to match, say, all packets that will be routed via router A. (A way to match incoming packets would be nice, too. But I think I can match by --mac-source for that). TIA, .TM. -- ____/ ____/ / / / / Marco Colombo ___/ ___ / / Technical Manager / / / ESI s.r.l. _____/ _____/ _/ Colombo@xxxxxx