I have those rules to accomplish my need, but it failed: ebtables -t nat -A POSTROUTING -p ipv4 --ip-src 10.111.207.26 -d 00:50:56:C0:00:08 -j mark --mark-set 2 --mark-target ACCEPT iptables -t nat -A POSTROUTING -s 10.111.207.26 -m mark --mark 2 -j MASQUERADE What i'm trying to do is when the package routes to one of my gateway 00:50:56:C0:00:08, it's masquaded, and others defaults to accept. and i tried many times but still not result. does anybody knows how to solve this? :P -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html