As far as I know it depends. If you use the ingress filter to apply QoS then it will be applied on eth0 before the prerouting chain on that interface (I think, this is good for me though ... hopefully someone will confirm whether I'm right or talking out my backside ;) ) If you apply the QoS policy on the output side of eth1 then it will be applied last of all immediately prior to packets being dequeued to the device for transmission. -- Richard Horton Users are like a virus: Each causing a thousand tiny crises until the host finally dies. http://www.solstans.co.uk - Solstans Japanese Bobtails and Norwegian Forest Cats http://www.pbase.com/arimus - My online photogallery -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html