On Tue, May 31, 2005 at 02:05:17PM +0200, Rodolphe AVERTY wrote: > Hello, > > i have two router connected to the internet and i want to send my tcp connection between them. > > this is my iptables script : > > ############################################################################ > iptables -t mangle -N INTERNET > iptables -t mangle -N INTERNET_ROUTER_1 > iptables -t mangle -N INTERNET_ROUTER_2 > > #le paquet est t'il en direction d'internet > iptables -o eth2 -t mangle -A POSTROUTING -p tcp -d ! 10.0.0.0/8 -j INTERNET you are trying to use fwmark's as a key in the routing decision; yet you are MARK-ing in the mangle POSTROUTING chain, POST meaning "after" and ROUTING meaning "routing." you'd be better served to place these rules in the mangle PREROUTING chain; PRE meaning "before" and ROUTING meaning "routing." -j -- "Peter: I only drank so that the Statue Of Liberty would take her clothes off." --Family Guy