On Thu, Aug 19, 2004 at 01:44:21PM -0400, Jason Opperisano wrote: > yeah--your marks don't match. the output of "iptables -t mangle -vnL" > shows you a mark of 0x32 (which is what 50 becomes in hex), whereas > your "ip rule" is looking for a mark of "50." change one of them. Ah ha! :) Well done, Jason - I had no idea it could be a simple mixup between different bases - it's now working like a charm - have a gold star and a choc-chip cookie =) gdh