> In the PREROUTING table in mangle, is the MARK target a final target, or > will a packet keep traversing the PREROUTING chain after getting marked? > > Thank you. MARK is not a final target--it just sets the mark on the packet. you can then use these marks as a match in later rules within mangle:PREROUTING or other chains in other tables. -j