On Thu, 2008-12-11 at 13:41 +0100, Pascal Hambourg wrote: > > AFAIK, locally generated packets are routed before they are sent to > > netfilter, so setting fwmarks there to influence routing is pointless. > > A rerouting happens after the OUTPUT chains in order to take into > account destination NAT and marks. Didn't now that, does this always happen (so all locally generated packets are routed twice, when iptables is active) or only when netfilter changes things that might affect the destination of a packet? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html