Hi, I would like to mark a packet in one of the iptables chains and then force it to the beginning of iptables so it can be processed again and goes through all the chains again (now also carrying the mark). I guess this is similar to how tunneled packets are unwrapped and then sent to the beginning again, although in my situation there is no unwrapping, the packet would be sent back basically unaltered. It wouldn't necessarily matter what interface the packet appears on the second time so perhaps this could also be done with some kind of simulated network interface? Kind of grasping at straws now. Appreciate any ideas you guys come up with. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html