> Forgot about that, sorry. Make sure sysctl net.ipv4.conf.ppp0.rp_filter > is set to 0 after ppp0 is created, otherwise the packet is discarded at > the input routing decision stage. sysctl net.ipv4.conf.default.rp_filter > contains the value that will be set for any new interface. Didn't seem to help. Currently I've got this: sysctl net.ipv4.conf.default.rp_filter=0 pon VPN (rp_filter for ppp0 is 0 at this point) iptables -t mangle -A OUTPUT -mowner --uid-owner rtorrent -j MARK --set-mark 1 ip rule add fwmark 1 lookup 200 ip route add default dev ppp0 table 200 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can see packets go out and replies come back and then get lost at mangle PREROUTING. Maybe I need to mark the packets coming back in or is it some connection tracking prob? Thanks, Matt -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html