Hi, I have the following rules: iptables -t mangle -A FORWARD -o net+ -p tcp --dport 3389 -j DSCP --set-dscp-class af31 iptables -t mangle -A FORWARD -o net+ -p tcp --sport 3389 -j DSCP --set-dscp-class af31 iptables -t mangle -A FORWARD -o net+ -p tcp --dport 23 -j DSCP --set-dscp-class af31 iptables -t mangle -A FORWARD -o net+ -p tcp --sport 23 -j DSCP --set-dscp-class af31 iptables -t mangle -A FORWARD -o net+ -p tcp --dport 25 -j DSCP --set-dscp-class af31 iptables -t mangle -A FORWARD -o net+ -j DSCP --set-dscp-class af11 If the last rule is enabled, it resets all the DSCP values to af11. If a specific rule is matched, does it not exit the chain? jason - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
