Hi list, What`s the differences between these two groups of rules.????? In the first i use MARK --set-mark to mark packets and in the other i use CONNMARK --set-mark 1. # iptables -I POSTROUTING -t mangle -j CONNMARK --restore-mark # iptables -I POSTROUTING -t mangle -m mark ! --mark 0 -j ACCEPT # iptables -I POSTROUTING -t mangle -m ipp2p --ipp2p -j MARK --set-mark 30 # iptables -I POSTROUTING -t mangle -m ipp2p --bit -j MARK --set-mark 30 # iptables -I POSTROUTING -t mangle -j CONNMARK --save-mark 2. # iptables -I POSTROUTING -t mangle -j CONNMARK --restore-mark # iptables -I POSTROUTING -t mangle -m mark ! --mark 0 -j ACCEPT # iptables -I POSTROUTING -t mangle -m ipp2p --ipp2p -j CONNMARK --set-mark 30 # iptables -I POSTROUTING -t mangle -m ipp2p --bit -j CONNMARK --set-mark 30 # iptables -I POSTROUTING -t mangle -j CONNMARK --save-mark Regards. Thanks