>Hello, world!\n Hi, >I would like to set up an egress filter, which would process all >outgoing packets just before they hit the network interface (especially >after all NATing takes place). >Is there any table/chain for that? Look here: http://jengelh.medozas.de/images/nf-packet-flow.png Mangle table postrouting chain is an appropriate place. Filtering would take place before nat table postrouting chain (nat table is consulted only for the first packet of the flow). best regards, Marek Kierdelewicz -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html